What Akorn does with your files, in plain language.
This page is the one we'd want to read before trusting a storage product. It says what we do, what we don't, and what's still planned.
Encryption
Files are encrypted at rest with AES-256 and in transit with TLS 1.3. Encryption keys are held by Akorn and rotated automatically. We do not offer customer-held keys today; if that's a requirement for you, tell us on the contact page and we'll say where it sits on the roadmap.
Sign-in
Passwords are hashed, never stored. Two-factor authentication with any standard authenticator app is available to everyone and can be required across a workspace. A new sign-in from an unrecognized browser always triggers an email with the device and location; that notice cannot be turned off. You can see every active session and sign out of any of them.
Who can see what
Your private drive is yours alone. It can't be shared, transferred, or opened by a workspace admin. Shared drives carry their own members. Inside a drive, folder permissions decide who sees which folders. A guest invited to one folder sees that folder, its contents, and nothing else: not the drive, not the member list.
Share links
Links can require a password, expire on a date, and stop after a number of downloads. Workspace owners can require a password on every new link and set a default expiry. Every active link on every drive is listed in one inventory, with a single action to revoke all links open to anyone.
Versions and trash
Uploading over an existing file keeps the previous version. Restoring an older version creates a new one; nothing is deleted by restoring. Trashed items are kept for 30 days and can be restored to where they came from. Version retention is 90 days by default and can be set to a year or forever per drive.
Audit log
Uploads, downloads, shares, link creation and revocation, sign-ins, permission changes, and deletions are recorded with who did them and from which device. The log is kept for a year, filterable by kind, person and date, and exportable as CSV.
What we don't do
- We don't scan the contents of your files for advertising or profiling. There are no ads in Akorn.
- We don't store photo avatars. People are shown by their initials.
- We don't let anyone, including workspace owners, open a private drive that isn't theirs.
- We don't silently extend a link's life. If it expires, it expires.
Planned
Reporting a problem
If you think you've found a security issue, email [email protected] . We'll acknowledge within two business days and tell you what happens next.