Our Secure FTP Server - Designed with security in mind.

iWeb FTP has been designed with security in mind. Have peace of mind your data is secure.


Company History

We are a real UK company (Company No. 3980207), with our head office based in Stafford employing 25 full time staff. We have been trading since 1995 and have been offering online file storage services since 2005. For more information, read more about us


Physical Safety and Security

Our servers are physically located within a UK based data centre, secured within a private locked suite on the first floor. Access to the servers is protected by CCTV, photographic identification, security tag door entry and padlocks.

The equipment used to provide the service is owned by iWeb.

Your data, when stored on our servers, is always located within the United Kingdom.

Our data centre partner, Telecity, run several of the largest data centres in the UK, servicing finance, media and web companies.

Physical Security

  • Integrated digital video camera surveillance throughout the exterior.
  • Independent client-card identification access system.
  • Unified security-breach alarm with access monitoring. 24/7/365 manned.
  • Secure managed delivery and loading bays.

Power

iWeb FTP servers are fed from two power sources: our in-rack UPSes and the main data centre power feed. The data centre feed is N+1 redundant, with its own UPS bank and diesel generator.

Fire

Monitored continuously from the Network Operations Centres, the fire detection and suppression systems minimise risk and suppress fires quickly to prevent problems from spreading.

  • High sensitivity smoke detection systems (VESDA).
  • VESDA immediately detects airborne heat and smoke particles, notifying the on-site facility staff before a fire has an opportunity to start.
  • Fully addressable two-stage fire detection system that monitors the underfloor, room and ceiling void space (smoke and heat).

Cooling

The data centre utilises a robust heating, ventilation and air conditioning (HVAC) system which delivers stable air flow, temperature and humidity for efficiency equipment operation.

  • Minimum N+1 redundancy on chilled water-cooling system.
  • Fully concurrently maintainable, dual-path secondary chilled water.
  • Close Control Units (CCUs) provide conditioned air to the data vtttfloors at a minimum N+2 redundancy.

Accessing Your Data

All of your data, including backups, is stored encrypted at rest and our default access methods (FTP-over-SSL and HTTPS) support encryption in flight. We also support the SFTP (or Secure FTP) protocol.

Access to your data is only permitted to our vetted administration team and all activity is logged for your peace of mind.


Encryption

To protect your data we:

  • Encrypt your data in flight using SecureFTP, FTPS and HTTPS
  • Encrypt your data at rest
  • Encrypt all backups at rest and in flight
  • Use industry standard 2048 bit Secure Socket Layer (SSL) certificates, and prefer 256 bit AES encryption.
  • Hash all passwords: they are never stored in plain text.

If you have the highest of privacy requirements, we recommend that you practice end-to-end encryption, and have documented one way of doing so using the free 7-Zip utility.


Operational Security

We blend security technologies to give us multilayer protection. On the perimeter, firewalls protect our servers from unwanted visitors. This is complimented with a bespoke layer of brute force protection.

We run the latest Long Term Support version of the Ubuntu Linux distribution. Our servers are continually patched with the latest vendor security updates.


Resilience and Backup

Your data is spread in real-time across multiple physical branded storage arrays. This private cloud infrastructure protects us heavily against the loss of data.

Each night a snapshot of the array contents is mirrored to a backup array for disaster recovery purposes.

Since 2005, when we launched our first online storage offering, we are proud to say we have never lost a single piece of customer data.

Our network has multiple fibre connections to large international ISPs. We run our own BGP installation and have our own allocation of IP addresses and autonomous system number.


Online Payments

We use SagePay to tokenise your payment card details. At no point during any transactions do we have access to your card details. We charge your account against the token we are provided with by SagePay.

All credit card information is stored in a PCI compliant payment system.

Included with every trial

  • 10GB of storage
  • 50 user accounts
  • Brandable interface
  • Dedicated support