Nextcloud File Drop: convenient and secure file uploading and sharing for Enterprises

Originally published at: File Drop: secure file upload and share for Enterprises

When you work with external clients, such as partners, patients, or customers, secure file sharing is of the utmost importance. At Nextcloud, you can access the File Drop function to upload and transfer sensitive documents within a couple of clicks. By creating a secure link with an optional password or expiration data, you can easily collaborate online while keeping the documents safe.

How to safely transfer files with File Drop

Getting started with File Drop is easy. In three simple steps, you can start uploading and sharing files securely and quickly.

Nextcloud File Drop Screenshot Menu

1. Click “+New” and select “Create file request”.

Nextcloud File Drop Screenshot Create a file request information

2. Add the file information, including what you are requesting, where the files should go, and possible notes. You can add links, a date, or any other information that will help the recipient understand what you are requesting. Click “Continue”.

Nextcloud File Drop Screenshot Optional information

3. Set additional information if needed, such as an expiration date for the submission or a password. Click “Continue”.

You are now ready to securely share files. Simply copy-paste the share link or send the link via email to your contacts, so they can start uploading their files.

Secure file uploading and sharing for your enterprise

Your client will then be able to upload files to your server in a secure and easy manner. When the client uploads a file, you will receive a notification of new files in your upload folder and proceed to process the data. At the end, you provide the result in a separate folder for your client to download securely. At all times, your data and your client’s data are protected by industry-leading security measures!

Nextcloud File Drop open source platform

Easy and personal

Send files and folders with just a few clicks to one or multiple customers. Create personal links for them to upload data to you.

nextcloud-hub5-open-source-sharing-options

Ultimate security

Files are securely transferred and stored on your own infrastructure, without any third party ever gaining access.

nextcloud flow - file access control

IT stays in control

The IT department enforces rules and limitations on password & expiration dates, access by IP, file type or size and more.

Your files under your control thanks to advanced features

The system administrator can rest assured that all interactions follow the rules and requirements set by the company with regard to passwords, expiration dates, and the limitations enforced by the Nextcloud File Access Control feature.

Data remains, at all times, on-premise, under full authority of IT. File Drop supports a wide range of storage technologies, including NFS, SMB, Windows Network Drive, SharePoint, Object Storage, and many more.

Create unique links for each customer

Rather than creating a random upload link, you can also have customized links by entering a customer’s email address and then enabling the File Drop function (upload only). Your client will receive an email with instructions on where to securely upload their files and, if you choose to add one, the password in a separate email.

You can have both a shared link and multiple, unique email links that each come with their own password, expiration date, and access rights. The password email can be disabled in the admin sharing settings for even more security-sensitive data, where a secure second channel (like a secure video call) has to be used for the password.

Key features

  • Attractive, easy interface
  • Unlimited shares and upload folders
  • Show/hide existing files
  • Edit/rename without link change
  • (Push) notifications
  • pdf/video/image preview
  • Templated sharing emails
  • Mobile and desktop clients
  • Read only/write permissions
  • File retention
  • Comprehensive audit tracking
  • Anti-virus scanning
  • Password protection
  • Expiration date
  • Encryption at rest & in transit
  • Data remains on-premise

  • Your own server = under your control
  • HIPAA, GLBA, NERC CIP, SOX, PCI compliance

Want to experience what digital sovereignty looks like?

Join the Nextcloud Special Event, featuring the release of Nextcloud Hub 26 Winter, on 18 February and see how easy it can be regain data control.

Get your online seat now!

1 Like

Thank you for File Drop. But maybe you can move File Drop on the next level.

I think this is far too cumbersome. Why not just create a link similar to Nextcloud Polls login where the customer can enter the name and it will automatically create an individual upload share for exact that name and folder. The customer can copy it for further use if wanted. That saves you all the email hassle and works more like Nextcloud Polls for hundreds of File Drops with only one first link. Because only upload is possible there is no security risk. Anyone who sees a risk should also not use the old File Drop.

I fully agree. For our small business we store client files but also need clients to provide files for us to work on. So creating a link per file is unusable. In the ideal world I could create a folder structure where the client can see but not edit their files we store and also upload files for us.
An auto alert that new files have been uploaded would also be essential for this tool to work.

1 Like

In the Custom permissions you can set e.g. Read, Upload and not Edit and not Delete see here. This prevents a previously uploaded file from being overwritten.

Maybe you can use Workflow external scripts.

But that solves not the real (my) problem. Furthermore, a separate share must be created manually for each customer. If Nextcloud can’t make coffee for me, it should at least automatically create and manage shares based on customer input. I already find that Nextcloud could support me in my laziness. :coffee:

Please be aware of a rather scary security flaw with this feature!
If the file drop share is created with the API, then despite setting the permissions to “file drop” only, the link created gives full read/write!

@tfboy
Sorry i can not really understand this. Can you explain it or can you post a website, issue, …?

It would be nice if file drop finally had chunking implemented after all these years…

Hi @devnull ,
This is an issue I discovered a month or so ago investigating implementing Nextcloud as a file drop platform leveraging an API to manage the shares.
Nextcloud does this well, but has one major security flaw: ther permissions requested in the API are not respected and full access is given.

Edit: I did post about it here: OCS Share API options and defining permissions - bug ?!?

I did also post the issue Hackerone on 27th April, but still no response…
https://hackerone.com/reports/1963634

1 Like

Does the Enterprise version of Nextcloud not support this? I’ve played around with the settings on my home version and it works fine, even for shares and uploads via a web browser.

Please read the issue linked above as to why. No, chunked upload has not been added.