Information on Enterprise-Level SecurityWe take security seriously at sFiles. In this article we give an overview of how we handle security.Jun 11, 2026Knowledge
TitleInformation on Enterprise-Level SecurityURL NameEnterprise-Level-SecurityArticle BodysFiles takes security seriously. sFiles was built as an enterprise app from the beginning—and it shows. sFiles uses Salesforce's built-in OAuth support to prevent tokens from ever ending up on users' computers. This allows us to offer a community-friendly version of sFiles that does not reveal any SharePoint authentication to the user. For internal users, sFiles leverages user-level OAuth for all SharePoint resources. This transparency allows all of the built-in permissions structure and conditional access to be leveraged by the Salesforce integration. Salesforce determines visibility, but permissions remain within the Active Directory hierarchy used by SharePoint. Leverages Salesforce's built-in oAuth key management (Named Credential) Uses full Microsoft security model and permissions Community access leverages shared user with less privileges and controlled visibility in the Salesforce UIAll files communication between client machines and all servers is at least TLS 1.2 256 bit encrypted