3 Reasons Why Oxygen is a Secure Alternative to Dropbox for Businesses

Don’t get me wrong, Dropbox is a great app. With the proliferation of mobile devices, the consumerization of IT is inevitable and services like Dropbox provides an easy way for users to sync their files between all their devices.

But it’s not for business.

A lot of their inherent security flaws have been brought into light lately by researchers Derek Newton (Dropbox: Insecure by Design?) and Christopher Sohogian (How Dropbox Sacrifices User Privacy for Cost Savings) –  Christopher also filed a FTC complaint against Dropbox’s security claims. In most recent news, they even left all user accounts unlocked and accessible to anyone with any password for 4 hours. You can also read about the incident on TechCrunch’s story here.

Consumer applications in general are just not meant for business use. They were designed to serve a basic use case: for users to access files on both their desktop and their new mobile phone. But for businesses, there are other security and management factors where a solution provider needs to take into consideration. How can we maintain control over files scattered across multiple teams, across all these different platforms and devices? How would the solution work between multiple users? How can we verify where our company data is stored?

For businesses, this list of requirements for security and control goes on. And for us, security is always a priority, not a tradeoff.

How Oxygen Works

Oxygen provides the same ease of use as other consumer applications – giving you native access to all your files from all your devices, but at the same time providing your company with full control and enhanced security over all of your data.

Easy Access with Local File System Integration  

Everyone loves Dropbox because its easy. We understand that user experience is critical and we spent a lot of time working on providing a seamless experience for our users. Oxygen directly integrates with local file systems so it shows up as another mounted drive/volume on your desktop (and no, not like Webdav). You can directly browse, open, edit. save and organize files the same way you do with a regular file system without having to change your workflow.

Syncing files with Oxygen is a breeze:

  • Files saved into Oxygen are automatically synchronized to the cloud
  • Freedom to selectively sync and unsync files based on what you need
  • Ability to view unsync files so you can get them when you need
  • Access all the files synced on your device’s local cache even when you’re offline

Oxygen installed on Windows

So now this brings us to…

Why Oxygen is a better, more secure file storage and sharing solution for businesses:

1. Team & Multi-group Approach to Sharing

As Jeff previously posted“With individualistic, consumer-oriented products, users control files and create their own shared folders. Only a folder creator can remove people from a shared folder. But what if an individual leaves the team or company? They’ve just taken the group’s data with them. Also, if every individual had rampantly created their own folder sharing relationships, there could be a tangled mess to sort through. How do you guarantee that nobody forgets to unshare a folder with that former employee? The boundary between the team and the individual must be clear.” 

On Oxygen, the ownership and control over data remains with the company as oppose to scattered over different users. Accounts are created within the context of a team, group or company. If a member leaves, your company’s admin can easily disable the user and revoke their access to company data on Oxygen.

Oxygen’s spaces unites the concept of users and files. Create different shared spaces and set specific access permissions for other users. Working with someone outside of your team or company? No problem. Invite them as a guest and they will only have access to that one specific shared space. Don’t want to share all the files in the space? No problem. Just create a password protected link for the file you need to share.

You can learn more about the details on how to collaborate with others from our sharing and collaboration features list.

2. A Controlled & Secure Container for All Your Data

Encryption, Encryption, Encryption!!!

Oxygen automatically encrypts all your data. We use SSL to encrypt data in transit, and AES 256 bit encryption for data at rest. We also encrypt all your data stored locally on all devices.

This is unique to Oxygen because most other services do not encrypt the data that’s been downloaded onto user devices. Oxygen serves as an end point protection and a complete, secure container for all your files saved on our platform. And yes, that means encryption for data on all mobiles devices such as iPhone, iPad and Android as well.

In other solutions without local device encryption, once the file is downloaded it automatically becomes unprotected and unmanageable. With Oxygen, local encryption provides an extra layer of security, in the case where someone gains access to your lost laptop, all the data stored on Oxygen would be in an unintelligible form once your Oxygen user session expires.

Each file content has its own server generated unique encryption key, and the keys are stored separately from the content on a different server and managed in the cloud. The file can only be decrypted when an authenticated user logs in and opens the file.

Access Authentication

Oxygen provides 3 layers of protection for user authentication:

  1. A unique key is generated per device
  2. User’s login credential (user ID and password) is encrypted using the unique key per device
  3. Then the login credentials are encrypted again on the device’s encrypted cache

This authentication model also protects against a user’s data being copied over onto a different machine – because it will not be able to decrypt the unique key that stores the user login credential that is associated to the specific machine.

Centralized Management

Account membership and access permissions are centrally managed on Oxygen. A team/company administrator can easily add or disable users through a web administrative console. We provide granular permissions on both account and shared space level. Assign read only, read + write and even manage rights to different users in your company. All guest users are also centrally managed by the administrator as well, so you can easily invite guest or revoke their access to maintain control over your company’s shared spaces.

With Oxygen, you always maintain control over your company’s data that is shared and synchronized between users and devices.

3. Enterprise Support

LDAP/AD Integration

Oxygen supports LDAP/AD integration for simplified deployment and management. After deploying our authentication gateway securely behind your corporate firewall, users can benefit from single sign on and self-provisioning by using their LDAP existing credentials.

LDAP integration

Cloud Storage Brokering: Public, Private & Hybrid Clouds

One of the major concerns for enterprise when they consider adopting cloud storage is – “Where is my data?”. To address that concern we provide enterprise clients the ability to choose where company data is stored. Mix and match between different storage providers so your company can meet specific performance, cost, security and compliance requirements. Storage brokering is a key benefit that’s unique to Oxygen. Our virtual file system is the middle layer that unifies different storage clouds — making cloud storage directly available for all company users, and much easier to deploy and manage.

Currently our cloud partners include AT&T, EMC, Savvis, and AWS.

It is our goal here at Oxygen to deliver a simple, controlled and secure cloud storage solution for the modern-day business. The line between personal devices and work life will continue to blur, and it should not be a tug of war between the two sides. Oxygen is the answer for businesses to adopt cloud storage – providing easy file access and sharing by synchronizing across devices, along with full control and security for your company’s data.

Learn more about Oxygen’s Enterprise Cloud solution and our security architecture.

You can also sign up and try Oxygen’s Cloud Drive for yourself!

Thanks for reading.

- Julia (@JuliaMak)

12 thoughts on “3 Reasons Why Oxygen is a Secure Alternative to Dropbox for Businesses

  1. Does Oxygen staff have access to the file encryption keys for user data, or is there a “zero knowledge” architecture like SpiderOak offers?

    • Hi Emory,

      To answer your question:
      Oxygen does indeed manage the file encryption keys to user data. We don’t employ the same architecture like Spideroak.

      We store the encrypted file content and keys separately. So in the case that someone is trying to gain access to the data illegally, they would have to compromise multiple server locations to get the file content, and to also find the unique specific key that is stored in a different location before they can decrypt and read the file.

      However Oxygen Cloud has been audited by a third party and received our SAS 70 certification. We maintain strict internal policies to prevent employee access to customer data.

      In addition, we also offer private cloud deployment models for enterprise customers. In a private cloud deployment, content would be stored by the company behind their own firewall and no Oxygen employee would have access to the data.

      We’re working on providing additional options for encryption and key management for our customers moving forward. If you have a specific security concern or requirement in your company, do let us know!

      Hope this helps.

      - Julia

  2. Oxygen as an enterprise alternative to Dropbox | Thought grazing …

  3. So the Oxygen application is still in the cloud but my content is behind my firewall? Is it possible to have the entire Oxygen application behind my firewall?

    • Hi JT,

      Technically that is possible for an Oxygen enterprise deployment. What are your concerns and requirements? We’d be happy to talk and answer your questions with more detail.

      - Julia

  4. Similarly to the Exchange server we bought and installed, can we purchase the Oxygen enterprise version for our environment? We have a private network that is only accessible by our employees. I was not able to find a trial version of the Oxygen solution to test in house.

  5. Kickstart your enterprise BYOD strategy « Oxygen Cloud's Blog

  6. Oxygen’s SDK Now Available for iOS and Android « Oxygen Cloud's Blog

  7. Alternatives to Consumer Cloud? Try Oxygen Cloud. | Skylance

  8. Concepts: Online Storage with or without WEBDAV(iPad) « Some concepts some ideas

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s