Frequently asked questions

No. Files are encrypted with AES-256 on your side before they leave your premises, and the key never leaves you. We store encrypted data, so we cannot read your files.

A unique RSA-4096 key pair is generated per client, and each authorised team member gets their own passphrase-wrapped copy of the key. Brute-force attempts are rate-limited, and a multi-party admin escrow process can recover access if a keyholder leaves.

Data stored in Cendro is held under S3 Object Lock (WORM), so it cannot be modified or deleted until its retention period expires. With Archive, the original files have also left your network, so there is less on-site to encrypt.

Access is role-based, and every action — upload, download, delete, archive, retrieve, approve — is recorded in an audit trail with the user identity, timestamp and IP. Retrievals can require admin approval.

A full audit trail and chain of custody, with coverage aligned to the ACSC Essential Eight, the Australian Privacy Act, and SOX/HIPAA, plus legal hold and eDiscovery readiness.

When a file is archived, the agent replaces the original with a tiny same-name placeholder (a stub) in the same location. Your folder structure looks unchanged. Anyone can open the stub to request the file back, so end users are not disrupted and IT is not flooded with tickets.

A user requests a file from its stub and an admin approves the retrieval from the dashboard, restoring it to its original location. You can also enable auto-approval policies for seamless access.

On-prem file shares (SMB/CIFS) via a lightweight agent, and SharePoint Online via the Microsoft Graph API. Agents can run across multiple sites, all managed from one dashboard.

Archive scans your storage and builds an access heatmap of what has gone cold. You then archive by rule (age, type, path, size or custom metadata) or select files manually.

It is a managed, encrypted document repository — a secure home for records you need to keep, organise, search and retain, without running on-prem infrastructure or paying a legacy document-management vendor.

Yes. Intelligent Search & Sort — included in every plan — reads documents with OCR, including handwriting, and extracts structured metadata, so scanned records become fully searchable.

You can set retention rules (for example, based on a person's date of birth), with immutable storage and a full audit trail, so records are kept for exactly as long as they need to be.

Yes. Bulk upload and storage scale on demand, comfortably handling millions of documents.

We do not run a free trial, but we are happy to give you a guided demo of the product (including retention rules and the dashboard). The demo is on our environment, not your data.

In AWS S3, in the region you choose — an Australian region is available for data sovereignty.

A flat monthly rate by capacity, not per user, starting at A$100/month. Data retrieval (egress) is included up to 10% of stored capacity per month; beyond that it is A$0.11 per GB (ex GST).

A flat monthly rate by capacity, from A$225/month for 500GB. Every plan includes Intelligent Search & Sort and a monthly page-processing inclusion, with one-off on-demand page packs when you need more. All six tiers are on the pricing page, with larger capacity available on request.

For Archive, pick a plan on the pricing page or talk to us. For Cloud, get in touch and we will help scope your setup.