Security, encryption & compliance archiving — found from sitemap — ONLYOFFICE Workspace

Cited by

Facts read from this source

• GDPR Report an error

  “GDPR Compliant ONLYOFFICE products are fully compliant with the General Data Protection Regulation, giving EU organizations the controls they need.”

• GDPR DPA Report an error

  “Data processing agreements are available on request.”

• HIPAA Report an error

  “HIPAA Supported ONLYOFFICE supports the technical safeguards required by HIPAA, making it a viable solution for healthcare organizations.”

• ISO Report an error

  “ONLYOFFICE itself is not currently ISO-certified as a standalone product. However, ONLYOFFICE Docs are included in solutions that operate within ISO-certified products and infrastructures.”

• Nis2 dora Report an error

  “Not directly. ONLYOFFICE is a software vendor, not an operator of essential services or a financial entity.”

• Open source Report an error

  “The ONLYOFFICE source code is publicly available on GitHub.”

• Bug bounty Report an error

  “ONLYOFFICE operates a public Bug Bounty Program on HackerOne, inviting security researchers and independent experts to test products and report vulnerabilities for fair compensation.”

• Self hosted Report an error

  “Host ONLYOFFICE on your own servers and keep documents, user data, metadata, and audit logs inside your infrastructure. ONLYOFFICE has no access to your data”

• Third party storage Report an error

  “Connect ONLYOFFICE to services your company uses. Your data remains with the storage provider you choose.”

• Cloud data centers Report an error

  “In ONLYOFFICE cloud, data is stored in certified data centers.”

• Jwt Report an error

  “JWT protection secures document editing sessions from unauthorized access and token manipulation.”

• Document permissions Report an error

  “View only Comment only Review with tracked changes Edit Fill forms”

• Password encryption Report an error

  “Protect individual documents with passwords using AES-256 encryption”

• Traffic encryption Report an error

  “Encrypt all traffic in transit with HTTPS / TLS”

• Spreadsheet protection Report an error

  “Locked workbooks and sheets Protected cell ranges Hidden formulas for unauthorized users”

• Digital signatures Report an error

  “Verify document integrity and authenticity with digital signatures. Signature requests can be sent to one or multiple parties”

• Version history Report an error

  “Track every change with timestamps and author attribution. Restore previous versions at any time.”

• Rbac Report an error

  “Assign one of four permission levels within each room: Room Manager Manage access Content Creator Manage files and folders Editor Full editing access Viewer Read only access”

• External sharing Report an error

  “Set permission levels Add password protection Define expiration dates Restrict downloading, printing, and copying”

• Watermarks Report an error

  “Apply document metadata and author information automatically as watermarks when sharing documents externally”

• Audit trail Report an error

  “Track who accessed a file, when they accessed it, from which device, and what action they performed. Audit reports can be generated and exported”

• Encryption at rest Report an error

  “Documents stored in ONLYOFFICE are encrypted at rest using AES-256-CBC with HMAC-SHA256 integrity verification.”

• Private rooms e2e Report an error

  “End-to-end encryption for Private Rooms is coming soon, using AES-256 with asymmetric key sharing for highly sensitive files.”

• Automated backups Report an error

  “Back up your data automatically to the storage provider of your choice, including Dropbox, Box, Google Drive, OneDrive, AWS S3, Google Cloud Storage, and others. Backup frequency and retention settings are configurable.”

• Two factor auth Report an error

  “Support for authenticator apps including: Google Authenticator Authy Other compatible TOTP apps”

• SSO SAML Report an error

  “Integrate with identity providers through SAML 2.0, including: Shibboleth OneLogin AD FS”

• Auth policies Report an error

  “Trusted mail domains Password complexity rules Cookie lifetime and automatic session expiry IP-based access restrictions Login attempt limits to protect against brute-force attacks”

• AI integration Report an error

  “ONLYOFFICE allows connecting with external, local, or open source AI models using your API keys.”

• AI privacy Report an error

  “Only if you explicitly send a prompt through the AI plugin. In that case, content goes directly from your browser to the provider’s API using your own API key. ONLYOFFICE does not receive or retain this content.”

• Local AI Report an error

  “The AI plugin supports Ollama and LM Studio for fully local inference, so document content does not leave your infrastructure.”

• AI agents rbac Report an error

  “AI agents manage files and permissions using strict role-based controls.”

• Community forum Report an error

  “The ONLYOFFICE community forum also provides a space to report issues, share feedback, and discuss product security and improvements.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Security, encryption & compliance archiving
• The Data Protection Officer Administration, identity & partner management
• The Data Protection Officer European sovereignty
• The IT Administrator Security, encryption & compliance archiving
• The IT Administrator Administration, identity & partner management
• The IT Administrator European sovereignty
• The IT Service Provider Security, encryption & compliance archiving
• The IT Service Provider Administration, identity & partner management
• The IT Service Provider European sovereignty
• The Public Sector IT Lead Security, encryption & compliance archiving
• The Public Sector IT Lead Administration, identity & partner management
• The Public Sector IT Lead Migration, open standards & exit
• The Public Sector IT Lead European sovereignty
• The Skeptic Calendar, contacts & office apps
• The Skeptic Security, encryption & compliance archiving
• The Skeptic Administration, identity & partner management
• The Skeptic European sovereignty
• The Small Firm Owner Security, encryption & compliance archiving
• The Small Firm Owner Administration, identity & partner management
• The Small Firm Owner European sovereignty