Security controls your CISO will love
Give administrators practical control over access, activity and recovery. vBoxxCloud brings key security controls into one European-hosted workspace.
- MFA and single sign-on options
- Granular access controls
- Audit logging and recovery controls
Two-factor authentication, granular admin roles and full audit logs, security built in, not bolted on.
Passwords alone don't protect business-critical files
- Stolen or reused passwords can expose business-critical files.
- Password-only access gives administrators limited visibility and control.
- Essential controls are often limited to expensive enterprise tiers.
- Stronger sign-in controls and clearer access boundaries.
- Clearer visibility of access and account activity.
- Core security controls available in one workspace.
How vBoxxCloud security works
- Set access rules
Configure MFA, approved sign-in methods and access boundaries for the workspace.
- Assign permissions
Give users, administrators and auditors the access appropriate to their role.
- Review activity and respond
Review logged activity, investigate issues and use available recovery controls, including ransomware protection where applicable.
Security in different contexts
Maintain clearer access controls and audit evidence for sensitive information.
Give teams flexible access across locations while maintaining stronger sign-in and access boundaries.
Support accountable access and clearer separation of administrative responsibilities.
Security controls at a glance
Access and identity
Configure stronger sign-in requirements and set access boundaries for users and administrators.
- TOTP and FIDO2 authentication methods
- SAML 2.0 and OpenID Connect single sign-on
- SCIM provisioning for supported identity workflows
- Session policies, device limits and IP allowlists
Visibility and governance
Review activity, maintain audit evidence and export relevant logs where supported.
- Audit log with 12-month default retention
- Extended retention options for eligible requirements
- Syslog and REST export for SIEM workflows
- Role-based access and activity visibility
Protection and assurance
Apply additional workspace protections and provide relevant assurance documentation.
- Geo-fencing and access-boundary controls
- Ransomware rollback and recovery controls
- ISO 27001 certification information
- Security documentation available for qualified requests
Frequently asked questions
Yes. TOTP-based 2FA (Google Authenticator, 1Password, Authy) and FIDO2 hardware keys are available on every paid vBoxxCloud plan, including the starter tier.
12 months by default. Extended retention up to 7 years is available for regulated industries (healthcare, finance, public sector).
Yes. Admins can require 2FA at workspace level, with a grace period for existing users, and block sign-ins from devices that do not meet the policy.
Single sign-on is available as a custom add-on on Enterprise plans. We can integrate any SAML 2.0 or OpenID Connect identity provider, including Microsoft Entra ID (Azure AD), Okta, Google Workspace, OneLogin, Keycloak and ADFS. Contact sales for scoping.
Yes. vBoxx is ISO 27001 certified by TÜV NORD. vBoxxCloud can support NEN 7510 requirements for healthcare data and is built to help Dutch government organisations meet the BIO. Audit reports are available under NDA.
Yes. We provide a standard security questionnaire, our latest pen-test summary and ISO 27001 statement of applicability under NDA.