01
Policy becomes a usable control
Named access, permissions, expiry and download conditions can turn information-handling expectations into a repeatable exchange process.
ISO-aligned controls for secure information exchange
Support ISO compliance with clearer controls and evidence.
My MX Data helps organisations manage sensitive file exchanges through named-user access, configurable permissions and detailed activity records. These capabilities can support an ISO-aligned management system; certification still depends on the organisation and its accredited certification body.
Named-user accessDetailed activity recordsNo public linksProtected file exchange
Controls evidenced
Support for ISO-aligned processes
Access control
Traceability
Retention
Accountability
Controls that work between audits
ISO evidence should come from the way work happens.
An audit should confirm how your management system operates in practice, not trigger a last-minute search for missing records.
My MX Data provides a controlled route for sending, receiving and tracking sensitive files. Its file-sharing controls can help connect documented policy with everyday activity and the evidence produced afterwards.
02
Normal activity produces evidence
File delivery and access activity create a clearer record of what happened without relying entirely on manual reconstruction.
03
Evidence remains easier to retrieve
Structured activity records can support internal reviews, external audits and continuous-improvement discussions.
Relevant standards, practical support
See where secure file exchange can support your management system.
My MX Data does not certify conformity to an ISO standard. It provides practical controls and activity evidence that may support selected requirements within an organisation’s wider management system.
Support information-security controls around file exchange.
ISO/IEC 27001:2022 sets requirements for an information security management system. My MX Data can support selected operational controls by reducing reliance on public links and informal attachment chains.
Access governanceLimit sensitive exchanges to named and authorised users.
Protected handlingUse AES-256 encryption alongside the quantum secure patented ASR methodology.
Activity visibilityKeep detailed records of delivery and recipient actions.
Evidence retrievalLocate relevant exchange information more efficiently during review.
Support consistency around controlled information.
ISO 9001:2015 establishes requirements for a quality management system. My MX Data can support controlled handoffs, version clarity and evidence around important business files.
Repeatable handoffsGive teams a consistent route for sending and receiving controlled files.
Version visibilityHelp participants identify the current file without erasing useful history.
Responsibility clarityKeep senders, recipients and review activity connected to the exchange.
Improvement evidenceUse activity records to identify recurring delays or process friction.
Support controlled information handoffs during disruption.
ISO 22301:2019 covers business continuity management systems. My MX Data is not a backup or continuity platform, but it can provide a controlled exchange route and clearer records when normal channels are unsuitable or unavailable.
Alternative exchange routeMove important files through a managed process rather than improvised channels.
Named participantsKeep access limited to the people involved in response or recovery activity.
Handover contextKeep files and relevant conversation connected during responsibility changes.
Recovery recordsRetain a clearer timeline of information shared during disruption and recovery.
Support privacy accountability around sensitive file exchange.
ISO/IEC 27701:2025 sets requirements for a privacy information management system. My MX Data can support selected controls around access, sharing and activity evidence for files containing personal information.
Need-to-know accessRestrict personal information to named users with a valid business purpose.
Sharing visibilitySee who received or accessed files containing personal data.
Exposure reductionAvoid public links and reduce uncontrolled copies created through email.
Accountability recordsKeep activity evidence that can support internal privacy review.
A practical route to stronger control
Move from scattered exchange evidence to a repeatable control process.
My MX Data can support the control environment around an existing management system. It does not replace policies, risk ownership, internal audit or an accredited certification body.
01
Map the exchange
Identify where sensitive or audit-relevant files enter, move between parties and leave the organisation.
02
Apply proportionate controls
Set recipient access, expiry, download conditions and other controls according to the risk of the exchange.
03
Capture activity records
Record file delivery and recipient actions through the normal course of work.
04
Review and improve
Use recurring exceptions, delays and workarounds to inform management-system improvement.
Exchange activity record
Controls active
Recipient access confirmedNamed user and access conditions recorded
✓
Protected exchange createdAES-256 and ASR handling applied
✓
Current version identifiedReview context retained with the file
✓
Recipient activity recordedDelivery and access information available
✓
Evidence availableAssurance record ready
✓
Evidence produced through normal activity
Make important file activity easier to explain.
A stronger evidence trail connects the people, file, timing and purpose of an exchange without implying that a software record alone proves ISO conformity.
01
Who
Identify the named user, role or organisation involved in the exchange.
02
What
Connect the activity record to the file, version or request being handled.
03
When
Keep a dependable timeline that can support review or investigation.
04
Why
Retain enough context to understand the purpose and expected outcome.
Operational benefits beyond the audit
Clearer controls can improve everyday work as well as assurance.
A more controlled information-exchange process can reduce search effort, improve accountability and make risky workarounds less attractive.
Faster evidence retrieval
Reduce time spent searching through email threads, shared drives and personal records when an exchange is reviewed.
Explore platform featuresClearer accountability
Keep senders, recipients and file activity connected across internal teams and external participants.
Explore enterprise collaborationLower handling risk
Reduce exposure created by public links, uncontrolled attachments and inconsistent sharing methods.
Explore encrypted file sharingMore consistent handoffs
Give business users a practical controlled route without adding unnecessary administrative weight.
Explore corporate file sharingStronger privacy processes
Use named access and activity records to support more deliberate handling of personal information.
Read about GDPR supportEnterprise-level options
Add organisation-level controls such as SSO, branding and deployment choices where required.
Explore enterprise plansISO compliance, explained
Clear boundaries make stronger claims.
My MX Data supports selected operational controls and evidence around secure file exchange. It does not provide certification or guarantee conformity to an ISO standard.
No. My MX Data is not a certification body and does not certify an organisation against an ISO standard. It provides file-exchange controls and activity records that may support parts of an organisation’s wider management system.
The platform may support selected control areas relevant to ISO/IEC 27001:2022, ISO 9001:2015, ISO 22301:2019 and ISO/IEC 27701:2025. The relevance of any feature depends on the organisation’s scope, risks, policies and implementation.
Named-user access, protected file handling, the avoidance of public links and detailed activity records can support selected information-security controls. They do not, by themselves, establish an information security management system or prove conformity.
Controlled file handoffs, version visibility and activity records can support documented-information processes and clearer responsibility. The organisation still owns its quality policy, procedures, objectives, internal audits and management review.
No. My MX Data is not a backup, disaster-recovery or business-continuity platform. It can provide a controlled file-exchange route and a clearer record of information shared during disruption or recovery, but it should sit within a broader ISO 22301-aligned continuity approach.
Named access, controlled sharing and activity visibility can support selected privacy-management processes around files containing personal information. The platform can help facilitate accountability, but lawful processing, retention decisions and privacy governance remain the organisation’s responsibility.
No. My MX Data supports execution around sensitive file exchange. Risk decisions, documented policies, competence, governance, internal audit, management review and corrective action remain owned by the organisation.
Certification should be issued by a competent certification body operating within an appropriate accreditation framework. UK organisations can use UKAS CertCheck to verify UKAS-accredited management-system certification claims.
Essential reads for ISO-aligned teams
Practical guidance for turning secure file activity into useful evidence.
Explore activity records, modern file handoffs and the controls that matter when an organisation needs to show how sensitive information was managed.
Building a File Audit Trail
Knowing that a file was sent is rarely enough. A credible audit trail should show who accessed it, what happened next and which details remain available months later.
Read the guideWhat Makes a File-Sharing Solution ‘Compliant’ in 2026?
Encryption is only one line on a longer compliance checklist. Access, auditability, retention, configuration and staff behaviour can matter just as much during an inspection.
Read the guideModernising How Teams Share Data
Email attachments are quick until files become large, confidential or repeatedly revised. The awkward part is finding out who accessed which version and where it travelled next.
Read the guide