http://firedataroom.com/virtual-data-rooms-explained-with-use-cases
Safe uploading and downloading business files is a key component of a myriad of online applications and services, such as content management systems, healthcare portals, insurance sites and messaging apps. Unrestricted uploads of files are a prime attack vector for malicious actors who are able to easily insert malware and steal private data.
A reputable uploading system must verify uploaded files against a list that allows file types and examine them for viruses prior to they are stored. This ensures that the private information of customers isn’t exposed, and adheres with compliance standards like HIPAA (for health-related information) and GDPR (for EU citizens).
The ability of confirming the file type is crucial as hackers often “mask” malicious files by changing their names to allowable extensions such as.jpg or.gif. Your solution might not be able of identifying the actual file type, and thus allow it to pass unnoticed. You require a file upload system that also validates the extension of the file to prevent this.
Another way to defend yourself against various attacks is to apply a strong encryption to all information during the flight and in rest. This turns files and messages into unreadable code that hackers cannot read even when they gain access.
You can also set up an uploading process which rejects files that don’t meet your name conventions. This will help keep your team organised and also prevent confidential information from being exposed in file names.