How secure is DropOff?

All files are transferred across the network securely encrypted.

All files uploaded and temporarily stored on DropOff are held on equipment owned and operated at the University of York's own Data Centre.

All data is subject to the University of York's and the country's Data Protection regulations and laws.

DropOff is in no way a "cloud" service. Everything is stored (even temporarily) on equipment directly owned by the University of York, and managed by its own IT staff.

All access to data is very tightly and strictly controlled by the University of York. All accesses to data on DropOff are logged and can be easily checked if you are ever concerned that a 3rd party might have gained access to your data.

Furthermore, uploaded data is only held on DropOff for a maximum of 14 days, after which time it is automatically deleted. There is no "undelete" facility available at all. No backups are taken of the uploaded data (it's only a transitory stopping point), so no uploaded data ever moves off DropOff itself onto other equipment or media such as backup tapes. After an uploaded file has been deleted, there is no way of recovering the file.