your fleet, your keys, your jurisdiction
Your files move between your devices. No one in between can read them. FILOTRON for Enterprise adds user authentication with your identity provider, plus access control and auditing, once devices have authenticated.
FILOTRON moves files straight from one of your devices to another. They are locked the whole way, from the moment they leave to the moment they arrive. And there is no central store of your files anywhere. What doesn't exist can't be broken into.
It all runs on your own equipment: the computers, tablets and phones you already own, and a few supporting services on your own servers, under your control. We never see your files and the software tells us nothing. Licensing works the way the product does: on your infrastructure, with no phone-home.
A password is no longer a perimeter. Devices mutually authenticate with hardware-bound keys before anyone can sign in at all, so a phished credential reaches nothing on its own. Whole attack classes (phishing, credential stuffing, MFA fatigue, credential-database theft) have nothing to act on.
It runs on the devices you already own and uses the security chip already built into them: Secure Enclave, TPM 2.0, Android StrongBox or TEE. Server keys live in your servers' TPMs. Private keys are never in process memory and never on disk.
No device enters the fleet on one person's say-so. Enrolment needs a sponsor and an administrator (two people, two approvals), the same separation of duties banks apply to payments, applied to your fleet's membership.
Both editions run on FILOTRON Fleet Fabric. Eighty-five seconds, five chapters: keys born in hardware, mutual TLS with proof of possession against your organisation's pinned root, post-quantum key exchange, and five platforms that all reach each other. Use the chapter buttons to jump.
Staff use the same work sign-in they use every day. Microsoft and the other big names are supported, proven with Microsoft Entra ID, Keycloak and Okta, and with the built-in directory; any OpenID Connect provider can be used. No new passwords to remember.
Hardware governs admission · Identity governs authorisation. The devices prove themselves to each other first; the person signs in afterwards, and their roles decide what they may reach.
Give each person or team exactly the folders they need. Access is granted per device, per folder, read-write or read-only, built entirely by ticking, with no paths typed. Change your mind and access is gone in minutes.
From your desk, a lost phone can be eliminated from the system. Sign-in stops immediately; its live session ends within one staple poll (drilled at 120 seconds); and every peer refuses its voucher, which is in any case bounded at 12 hours.
It all runs on your own equipment and every action is recorded in your own records. Every device refusal and every voucher issued lands in your SIEM; administrative actions sit on the access server's own records, which you also own. Every edition retains local forensic logging on every host, so an incident can always be investigated from on-host records.
Nothing in this product asks you to trust us with a log. We never see your files, and the software tells us nothing.
Real screens from the FILOTRON for Enterprise app administering a live test fleet. Nothing is mocked.
The seven logical layers, from finding a device to moving a file: a three-minute silent explainer. Nothing loads until you press play.
The same fabric in every edition. The editions differ in who holds the root of trust and in how far the records travel. Ask us for the rate card.
Works on Mac, Windows, Linux, iOS and Android. One app, everywhere. On the same network or over the internet.
We will happily set up a trial installation in your own office, for your own testing. Your IT team can ask us for the full technical description.