Print Article

Shared workspaces and security and data protection by design and by default

  1. When the world changes, and we all started to work from home, and it became quickly became apparent that to work effectively, employees needed to collaborate and share data.
  2. Many jumped in and took the first solution and maybe compromised quality for the price.  The problem with many of the solutions chosen is that they are not secure. Sharing confidential information via email or pluggable devices is not always ideal as these methods can make data difficult to control access to and protect
  3. While cloud storage and share companies such as Dropbox and Sharefile provide a useful solution for storing data, many organisations find it challenging to manage encryption keys for their files, as neither the uploaded files nor the security options are in their control. And this difficulty creates regulatory risk.
  1. In consideration of this new environment and new tools, Companies cannot ignore the above risks because of the challenges from the General Data Protection Regulation (GDPR), which must be accounted for when collaborating ensuring information is always secure.
  2. The GDPR requires you to put in place appropriate technical and organisational measures to implement the data protection principles and safeguard individual rights; this is 'data protection by design and by default'.
  3. In essence, this means you have to integrate or 'bake in' data protection into your processing activities and business practices, from the design stage right through the lifecycle. This concept is not new. Previously known as 'privacy by design', it has always been part of data protection law. The key change with the GDPR is that it is now a legal requirement.
  4. Data protection by design is about considering data protection and privacy issues upfront in everything you do. It can help you ensure that you comply with the GDPR's fundamental principles and requirements and forms part of the focus on accountability.

The following would be the minimum requirements when sharing documents

  1. Access Control
  2. Auto Versioning
  3. Restrict Access
  4. Retention Policies
  5. Geographical Restrictions
  6. Detailed Audits
  7. Encryption
  1. Galaxkey Workspace offers users a secure ENCRYPTED work environment where they can upload and share files and folders.
  2. You can create Workspaces for in-house users, along with external contacts, you need to collaborate.
  3. With complete controls in your hands, users can be added to the Workspace and assigned access.


Galaxkey Workspace offers users a secure work environment where they can upload and share files and folders. Workspaces can be created for in-house users, along with external contacts you need to collaborate with. With complete controls in your hands, users can be added to the Workspace and assigned access.

  1. Secure by Design
    • All files stored in the Workspace are scanned for viruses before they are uploaded and secured with user identity by default.
    • No unsecured files are ever stored, and files cannot be accessed without the correct user authentication.
  2. GDPR Compliance
    • Galaxkey workspace is designed to ensure it is fully compliant with the GDPR and other international regulatory requirements.
  3. Detailed Audits
    • When you need reports for audits and compliancy purposes, the Galaxkey Workspace provides users with detailed information on all documents secured and unsecured.


The Galaxkey workspace is a powerful platform designed to solve both compliancy and confidentiality requirements for securely sharing files, while also ensuring users can work collaborate effectively without disruption.

  1. Access Control
    • Files are uploaded in Workspace and can be accessed by users who have been granted permission.
    • With total control, files can be completely restricted or viewable only online, with no option to download.
  2. Auto Versioning - built-in version control
    1. Galaxkey Workspace has built-in version control.
    2. When a file is modified, the previous version is maintained, allowing users always to return it if required. Users can configure how many files are stored in the version history.
  3. Collaborate Online
    • Galaxkey provides a complete editing suite for modifying documents in Word, Excel, and Spreadsheets.
    • Created to facilitate collaboration, multiple users can work simultaneously on one file and view changes made by each other, keeping in contact via built-in messaging.
  4. Select your Size Limit
    • There are no size limits on files being uploaded or downloaded, but this can be configured within the Workspace settings.
  5. Restrict Access
    • Access can be restricted to Workspace for a specific geographic region, offering an enhanced level of protection from malicious attacks.
  6. Themes
    • Workspace offers multiple themes to provide users with a selection of different styles and layouts for their interface to suit individual preference.
  7. Retention Policies
    • Users can define their individual company retention policies on file and workspaces to make certain they are compliant with regulations.
  8. Geographical Restrictions
    • Users can define access to regions that are authorised to connect to a corporate workspace and are able to place restrictions for one or multiple regions.

Interested? Get a 14-day trial. Email


The Team

Meet the team of industry experts behind Comsure

Find out more

Latest News

Keep up to date with the very latest news from Comsure

Find out more


View our latest imagery from our news and work

Find out more


Think we can help you and your business? Chat to us today

Get In Touch

News Disclaimer

As well as owning and publishing Comsure's copyrighted works, Comsure wishes to use the copyright-protected works of others. To do so, Comsure is applying for exemptions in the UK copyright law. There are certain very specific situations where Comsure is permitted to do so without seeking permission from the owner. These exemptions are in the copyright sections of the Copyright, Designs and Patents Act 1988 (as amended)[]. Many situations allow for Comsure to apply for exemptions. These include 1] Non-commercial research and private study, 2] Criticism, review and reporting of current events, 3] the copying of works in any medium as long as the use is to illustrate a point. 4] no posting is for commercial purposes [payment]. (for a full list of exemptions, please read here]. Concerning the exceptions, Comsure will acknowledge the work of the source author by providing a link to the source material. Comsure claims no ownership of non-Comsure content. The non-Comsure articles posted on the Comsure website are deemed important, relevant, and newsworthy to a Comsure audience (e.g. regulated financial services and professional firms [DNFSBs]). Comsure does not wish to take any credit for the publication, and the publication can be read in full in its original form if you click the articles link that always accompanies the news item. Also, Comsure does not seek any payment for highlighting these important articles. If you want any article removed, Comsure will automatically do so on a reasonable request if you email