How Walnutcrew keeps your files safe.
A plain description of where your files are stored and what protects them. If something here doesn't answer your question, ask us.
Encrypted on the way and at rest
Every connection to Walnutcrew uses HTTPS. File contents are stored in Backblaze B2 data centers in the United States with server-side encryption. File names, folders and sharing settings live in Google Cloud Firestore in the us-east4 region (Virginia).
A way back from mistakes
Each file keeps its last 25 versions (100 on Business and Pro), so a file saved over can be restored. Deleted files and folders go to the trash for 30 days before they are removed for good.
Sharing you control
Share links can expire, be limited to a number of uses, and require a password. After 10 wrong passwords in 15 minutes a link locks. You can switch any link off at any time.
Devices you can see and revoke
The Mac, Windows and phone apps sign in through your browser and get their own device key; your password never reaches the app. Every signed-in device is listed in your account, and removing one signs it out within a minute.
Company accounts with an admin
People join only by invitation. Admins choose who is a member or an admin, who can see each team folder, and can switch off a person's account; their files stay with the company.
Office editing on our own server
Word, Excel and PowerPoint files open in an editor that runs on a server we operate in Germany (Hetzner). While a document is open for editing, a working copy is held there; when everyone closes it, the result is saved back to Walnutcrew as a new version.
What we don't claim
Walnutcrew does not hold SOC 2, ISO 27001 or HIPAA certifications. The second copy of your files is kept by the same storage provider (Backblaze), in a separate account and another US region, locked for 30 days.
Report a security issue
If you think you've found a vulnerability, email support@walnutcrew.com with the details. We'll confirm we received it within 24 hours and keep you posted while we fix it.