Security, privacy & data sovereignty.

FAQs

Who is File Republic and how long have you operated?

File Republic (formerly FileMan) has been built specifically for the legal industry and has supported thousands of firms globally since 2005. We currently manage more than 9.1 million legal files and have securely processed over 637 million words across our platform. Confidentiality, privacy and auditability are at the centre of everything we do.

How secure is your physical and digital storage?

All physical files are stored in Iron Mountain Australia’s purpose-built secure facilities, featuring controlled access, 24/7 monitoring, environmental protection systems and strict chain-of-custody controls (find out more on our Physical Storage page.)

All digital data is hosted exclusively within the AWS Sydney Region, which holds certifications including ISO 27001, SOC 1, SOC 2, SOC 3 and IRAP. These standards are trusted by government, defence, top-tier law firms and major financial institutions.

Together, this ensures your information is managed at the highest available security level within Australia.

Can we reference File Republic in our engagement letters?

Yes. We assist firms in ensuring their retainer or engagement letters clearly cover the use of secure third-party storage. We can provide standard wording addressing:

  • storage method

  • jurisdiction

  • retention

  • destruction

  • access and chain-of-custody

Do you retain any copies after destruction or service termination?

No. We never retain copies.

  • Physical files are destroyed through Iron Mountain’s certified destruction process.

  • Digital files are permanently deleted from our platform.

  • When a firm exits the service, we provide a complete export of all documents, metadata and audit logs. Once receipt is confirmed, all remaining data is deleted.

Nothing is kept.

Where is our digital data stored?

All data is stored only in the AWS Sydney Region.
We do not store, replicate or transmit any data outside Australia.

Do any overseas laws (e.g., USA Patriot Act) apply?

No. Although we use AWS, our entire environment is Australian-based with no overseas backup or replication. This means there is zero exposure to foreign legislation such as the USA Patriot Act.

What jurisdiction governs File Republic’s contracts and disputes?

All agreements are governed by Australian law, and any disputes are handled in Australian courts, ensuring local and predictable jurisdiction.

What happens if servers are down or data is corrupted?

Our environment is hosted within AWS Sydney across multiple independent Availability Zones, providing:

  • continuous data replication

  • protection against single-point failures

  • 99.99% availability and 99.999999999% durability

We also run daily integrity checks and full performance monitoring.
Firms retain access under normal operating conditions, and data remains protected and recoverable even during AWS or PMS outages.

Do you comply with requirements for Australian-only storage?

Yes.

  • Physical files: stored solely within Iron Mountain Australia.

  • Digital data: stored solely within AWS Sydney.

No data ever leaves Australia.

Why does File Republic’s model align with legal best practice?

Because it delivers:

  • Australian-based physical + digital storage

  • industry-leading security, privacy and auditability

  • certified destruction and clear chain-of-custody

  • predictable, prepaid long-term retention and destruction

  • compliance with Australian privacy, confidentiality and PII obligations

  • significantly higher protections than typical on-site or internally managed systems

This gives firms complete confidence that their clients’ information is managed securely, responsibly and in full alignment with professional obligations, now and in the future.

Certified so you can be certain.

In today's digital landscape, trust is everything.
The Cybercert SMB1001 Gold certification is our commitment – backed by independent verification – that when you entrust us with your sensitive information, it's protected by rigorous, industry-leading security practices.

Read more