Access control
Compare the approved recipient list with the access conditions actually applied.
ISO 27001
File transfer controls for ISO 27001 programs
Examine how an external file release works inside your information security management system. Trace a sample from authorization through recipient access and review.
Start my free trial ↗7 days. Up to 5 users.
No credit card required.
No credit card required.
Scroll to explore ↓
- Prepare
- Protect
- Deliver
Prepare the file and recipient list
Check the approved version, name the person who needs it and set the access period around their task.
Trusted with valuable business data
01 / THE WORK IN PRACTICE
Choose a transfer within scope
Select a supplier handoff covered by your security policy. Identify the document owner, approved recipient and evidence the reviewer expects.
Information transfer
Sample an outgoing file and identify the person who approved its release.
Cryptography
Ask how file contents are protected during transfer and storage.
Supplier relationships
Record who at the supplier owns access requests and changes of personnel.
BUILT FOR BUSINESS
Put secure file exchange to work in your ISO 27001 program
Bring practical protection to confidential business documents with MX. Use the capabilities below to connect your file-sharing process with the evidence your team needs for a review.
| Review area | MX capability and plan | Useful evidence to retain |
|---|---|---|
| File protection | 256-bit AES encryption: Pro, Premium, Enterprise. Multi-factor authentication: Pro, Premium, Enterprise. Advanced data protection with patented ASR: Enterprise. | Record the selected plan and configured controls. Ask the MX team for technical documentation when your review needs it. |
| Recipient access | The features page describes configurable access, availability periods and expiry. | Keep the approved recipient and access period with the business request. Review downloaded copies through your own retention process. |
| Exchange activity | Full user auditability: Pro, Premium, Enterprise. | Use a representative transaction to identify the user and time information available to your reviewer. |
| Identity integration | SSO integration: Enterprise. API integration: Enterprise. | Record the agreed integration configuration and the internal team responsible for access changes. |
Reviewed 11 November 2026. Sources: ISO’s description of ISO/IEC 27001. MX contributes technical controls to your wider program; certification and organizational compliance depend on the relevant scope and operating process; MX features and MX plans. Compare the configuration you intend to use.
02 / EVIDENCE YOU CAN FOLLOW
Assess the supplier evidence
Request current certification information where applicable and examine its scope. Document your own configuration decisions and staff responsibilities separately.
EXCHANGE RECORD / ILLUSTRATIVEAssurance-Records.zip✓
Sender verifiedNamed account✓
Protection appliedAES-256 / ASR✓
Recipient authenticatedAccess checks✓
Activity recordedReviewable history✓
Claims worth questioning
Ask which service, location and dates a certification claim covers.
Contributions worth evaluating
Test whether your team can produce the evidence specified in its own policy.
CUSTOMER PERSPECTIVES
All customer stories ↗“
“I would highly recommend MX to anyone looking to send and receive secure data quickly and efficiently.”
Daniel FrancisProject Engineer, Envisage Group
Read the story ↗01 / 02
03 / CONTROL, WITHOUT THE FRICTION
Test the procedure with a sender
Ask a team member to issue a sample using the written instructions. Compare the recipient, permissions and expiry with the original authorization.
Define the scope of the route
Choose a business process, file type and external party for the review.
Write it into the transfer policy
Describe the checks staff must make before releasing a file.
Assign ownership and review
Identify who approves access and who investigates a discrepancy.
Test with a real sample
Use a test file to compare the written procedure with the recipient experience.
04 / THE DETAILS MATTER
Follow up on discrepancies
Assign an owner to any finding and repeat the sample after the correction. See ISO’s overview of ISO/IEC 27001 for the standard’s management-system scope.
EXCHANGE NOTE01 / 04
Access control
Compare the approved recipient list with the access conditions actually applied.
EXCHANGE NOTE02 / 04
Information transfer
Sample an outgoing file and identify the person who approved its release.
EXCHANGE NOTE03 / 04
Cryptography
Ask how file contents are protected during transfer and storage.
EXCHANGE NOTE04 / 04
Supplier relationships
Record who at the supplier owns access requests and changes of personnel.
Controls within a wider program. MX can support configured file-exchange safeguards. It does not certify your organization or establish compliance by itself. Confirm the service configuration, contractual terms and suitability for your data before deployment.
GOOD QUESTIONS. CLEAR ANSWERS.
A clearer route.
From the start.
Practical answers about iso 27001 and where MX fits.
How does MX fit this workflow?+
Apply named access, encryption, permissions and activity evidence to sensitive external transfers. These exchange controls can help support an ISO 27001-aligned information security management system when configured and governed appropriately.
Does using MX make our organization compliant?+
No. Technical controls are part of a wider program. Your organization remains responsible for the applicable obligations, risk assessment, policies, permissions and contracts. Confirm any required agreements and service configuration with MX before handling regulated information.
What controls can we apply to a file exchange?+
Named-recipient access, authentication, permissions and expiry settings help define the exchange. Activity records let your team review what happened. The available configuration should be matched to your requirements.
Does MX replace our existing work tools?+
Keep creating, editing and storing files in the systems your team already uses. MX focuses on controlled handoffs, rather than background synchronization, live co-authoring or permanent backup.
What is included in the free trial?+
Try the MX feature set for 7 days with up to 5 users. No credit card is required.
YOUR NEXT EXCHANGE STARTS HERE
Test an exchange with your team
Invite a colleague to receive a sample file, then review the access settings and activity together.
7 days freeUp to 5 usersNo credit card
- Full feature access
- Unlimited file size transfers
- Named recipients and MFA
- Custom branding and upload portals