Shed
Archive storage for agencies, studios and production companies

Shed work.

Finished projects out of a full SharePoint or Google Drive, off an old server or straight off a drive. Every file checked, kept, and still a double-click away in the Finder. Half what your cloud charges.

shed /ʃɛd/ verb to let go of a load you no longer need to carry; noun the place you keep it.

Swept out of SharePoint and Google DriveOff old serversStraight off drives and cardsInto the Finder
Checked file by fileEvery copy is compared with the original by hash before anything leaves your cloud.
Immutable snapshotsNightly. Nobody, including us, can delete one for fourteen days.
A node in your countryNew York, London, Singapore or Melbourne, named in your agreement. Replicated across our nodes.
Every fetch recordedWho opened or downloaded what, and when.
Shed Sweep · the intelligent option

Your cloud tidies itself.

Shed Sweep works out what is finished, moves it out of SharePoint or Google Drive into your shed, and leaves your team a note where it went. Your cloud stays lean, your bill stays down, and nobody has to remember.

12.8 TBswept out of Fieldhouse Studio's SharePoint so far, every file checked
Knows what is finishedRules you set: untouched for three years, closed projects, whole libraries. Folders you name are left alone.
Asks firstA proposal by email, folder by folder. Nothing leaves your cloud until an owner says yes, unless you trust it to carry on.
Checks every fileEach copy is compared with the original by fingerprint before anything is removed from your cloud.
Works out of hoursGently, outside your working day, so nobody in the office feels it.
Four products, one shed

Files, Archive, Backup, Ingest.

One sign-in, one price per terabyte.

Use cases

Four sheds, and what each one solved.

Composite cases. The names are made up.

A FULL TENANT

Fieldhouse Studio

A creative agency whose SharePoint had grown to ten times what the licences included. Shed took the finished project folders a library at a time, checked every file, and left a note in each folder saying where it had gone.

Moved out of SharePointOver 10 TB
Monthly storage billDown by more than half
Files their team lost access toNone
A SERVER RETIREMENT

Larkin & Co

An eleven-year-old file server in a cupboard that nobody would switch off, because nobody could say what was on it. It came across whole, folder structure intact, and became searchable for the first time.

Brought across4.2 TB, 1.1m files
Searchable inside documentsAll of it
Hardware still runningNone
BACKUP ONLY

Harbour Films

A production company that wanted a copy of its working storage somewhere its cloud provider was not. A nightly checked copy of the edit volume and the delivery library, snapshotted and replicated to another country. Nothing was removed from the original.

Copied nightly22 TB
Removed from the sourceNothing, ever
Replicated toAnother country
RECORDS AND RUSHES

Pike Street

Seven years of finance records, and card dumps too large for the cloud. The records went in by sweep and are opened twice a year; the rushes go in from the Mac app on shoot day.

Records kept and provable7 years
Rushes in on shoot dayUp to 2 TB
Paid at cloud ratesNone of it

First questions: what happens when SharePoint storage is full, what Microsoft's extra storage costs and how to free up Google Shared Drive space.

How it works

Three steps. Nothing to install.

Shed works from the folders your team already uses, with the sign-in they already have.

01

Mark it for the shed

Drag a folder into the Archive library, or set rules and let Shed Sweep find what counts as finished: untouched for a set number of years, over a size, or job codes marked closed.

02

Shed Sweep moves it

Overnight, Sweep copies the folder to your shed and checks every file against the original. It shows what it would clear and waits for an owner to say yes. After a cooling-off period you set, the files leave your cloud and a note is left where the folder was.

03

Fetch it back any time

Browse, search and preview in the browser, Office documents, PDFs, images and video included. Download a file or a folder, or put a folder back where it came from in one step. Every action is recorded.

What your team sees

Find it, open it, put it back.

Search reads names and the words inside documents.

app.shed.work/search?q=campaign+book
ResultWhereSize
Campaign_Book_FINAL.pdfArchive / 2019 / Campaigns412.0 MB
Campaign_Book_v3.inddArchive / 2019 / Campaigns / Working1.8 GB
Campaign brief, spring.docxArchive / 2018 / Briefs84 KB
Book launch, run sheet.xlsxArchive / 2021 / Events212 KB
4 results in names and contents. 0.08 s.
Campaign_Book_FINAL.pdf · 412.0 MB · 38 pages
Created 12 Mar 2019 by Priya Nair
Last changed 12 Mar 2019, 16:40
Checked against SharePoint 3 Mar 2025
DownloadPut backOpen
app.shed.work/putback/Archive/2019/Campaigns
Put back Campaigns
This folder came from Fieldhouse Studio › Marketing › Archive › 2019 › Campaigns, in SharePoint.
Goes back toThe same place, with the same name. The breadcrumb note is removed.
Size41 folders · 6,208 files · 212.4 GB
CheckedEvery file is compared with the shed copy by hash as it lands.
The shed copyStays. Nothing is removed from the shed.
Putting back · 3,104 of 6,208 files50%
About 40 minutes left at the current rate. You can close this page; we email Mia Calder when it is done.
Stop
app.shed.work/files/Archive/2019/Stills_selects
Archive / 2019 / Stills_selects
Stills_selects
Grid
HB_0012.cr3
HB_0019.cr3
HB_0031.cr3
HB_0044.cr3
HB_0052.cr3
HB_0067.cr3
HB_0071.cr3
HB_0088.cr3
HB_0095.cr3
HB_0103.cr3
HB_0110.cr3
HB_0124.cr3
1,204 files, 38.1 GB. Thumbnails for images, video, PDFs and Office documents.
Tags

Your own words, across every folder.

A tag puts a file in as many places as you need without moving it: needs clearance, client approved, for the reel.

app.shed.work/tags/needs-clearance
Tags / needs clearance
needs clearance
38 files
needs clearanceclient approvedfor the reelmusic cleareddo not deleterushespress
FileWhere it livesTagged by
HB_0052.cr3Archive / 2019 / Stills_selectsMia Calder
Campaign_Book_FINAL.pdfArchive / 2019 / CampaignsPriya Nair
Spring_film_master.movArchive / 2021 / Film / MastersMia Calder
Lookbook_spreads.inddArchive / 2018 / PrintTom Ekwall
Four folders, four years, one list.
app.shed.work/files/Archive/2021/Film
Tag 24 selected files
Type a word. A new one is made as you type.
for the reel ×music cleared ×
presspress kitpressed vinyl
Tags belong to the company. Everyone sees the same list.
CancelTag 24 files
Sending things out

A link that knows who opened it.

A link for someone outside your company, with an expiry date, a record of every open, and control over who can open it.

app.shed.work/files/Archive/2019/Campaigns
Share Campaigns
Who can open it
People you inviteEach person gets an email with their own link and proves their address with a code.
Anyone at fieldhousestudio.com with the linkThey prove their address with a code, so nobody outside gets in.
Anyone with the linkNo sign-in. For sending a cut to someone outside.
ed@printer.example ×mo@printer.example ×ann@fieldhousestudio.com ×
Press Enter after each address, or paste a list.
Works for7 days
Longest allowed90 days
They will see41 folders · 6,208 files
They canOpen and download
They cannotChange or put back anything
Opens and downloads show on the Shares page. The link never shows more than you can see.
Not nowSend
app.shed.work/shares/campaigns-2019
Campaigns
People invited: ed@printer.example, mo@printer.example, ann@fieldhousestudio.com. Works until 28 March.
WhoWhatWhen
ed@printer.exampleOpened, then downloaded 2 filesToday, 09:14
ed@printer.exampleProved the address with a codeToday, 09:13
mo@printer.exampleOpenedYesterday, 17:52
someone@elsewhere.exampleAsked for a code and was refused: not invitedYesterday, 17:55
A forwarded link gets no code. Only the addresses on the invitation can open it.
ExtendStop this link
Drives and bulk ingest

Drives, cards and tapes.

Project drives and shoot disks going back years. We read them, list every file, and keep what is on them.

Drives from one company overlap. Shed stores those bytes once, and the catalogue shows every drive a file came from.

THE CATALOGUE

Every file listed

Every drive is read and every file listed with its size and fingerprint: what is there, what is duplicated, what is unreadable. The folder structure is kept, drive by drive.

FAILING DRIVES

Unreadable files are reported

Anything that will not read cleanly is reported by name.

AFTERWARDS

Disposal

Drives are wiped and destroyed with a certificate each, or sent back to you.

A file counts as arrived when the shed has computed the same fingerprint. A transfer resumes after a sleep or a dropped connection, and a file already in the shed is not sent twice.

Upload straight in

Rushes, masters and artwork.

Files too big for the cloud go straight in. Three ways, every file checked.

Drag into the Archive folder. Shed Sweep moves it on the next run.
Upload in the browser. A handful of files, with the same sign-in. Folders arrive as folders.
Shed for Mac. Point it at a drive or a folder, choose where it lands, and leave it running. Resumable, and it never sends the same file twice. Shed for Mac.
A node in your building. Your edit suites write to it at local speed and it replicates to your shed overnight. Ask.
Shed · Mac
Harbour shoot, March
To Fieldhouse Studio › Rushes › 2025-03 Harbour shoot · from RAID "Shuttle 2"
Drop files or folders here.
ItemSizeStatus
A001 to A014 (card dumps)3.9 TBVerified
B001_C007.mov48.2 GB
62% · 11 min
Key_art_final.psb6.4 GBQueued
Grade_v3.drp212 MBQueued
Stills_selects (1,204 files)38.1 GBQueued
4.8 TB in the queue · 3.9 TB landed and checked81%
Pauses if the Mac sleeps or the cable comes out, and picks up where it left off.
PauseAdd more
For owners

For owners.

THE RECORD

Who fetched what

Every sign-in, search, open, download and change of access, with who and when. Export it as CSV.

ACCESS

Narrow any folder

Limit any folder to named people, a group or a domain. The rule covers browsing, search, downloads and ZIPs.

THE SAVING

What it is worth

A card on every page shows what the shed would cost in extra cloud storage, what it costs here, and how much Sweep has cleared.

Setup

Running within a week.

We set it up with you. Nothing changes for your team until the first sweep is approved.

Day one. You say which libraries or drives are full and grant Shed Sweep read access to them.
Day two. Sweep lists what it would move and what that frees. Nothing is copied yet.
Days three to five. The first library is copied and checked. Your owners browse it and approve the removal.
From then on. Sweep runs on your schedule and proposes each sweep, until you trust it to run unattended.
Clouds and systems

Connections.

A shed connects to the clouds your work lives in and to the system your jobs come from.

YOUR CLOUDS

Microsoft 365 and Google Workspace

Approve Shed once and it finds every site, library and Shared Drive. You tick what it sweeps. A connection starts as copy only.

YOUR JOB NUMBERS

The system your work runs through

Connect it and job numbers become a way of finding files. File a folder against a job and everything under it comes too. Open a job and see what the shed holds for it.

THE READ-ONLY API

Your system can ask too

GET /api/v1/jobs/FH2419 answers with the files, what they come to and links back into the shed. A token sees one shed and nothing else.

FH2419 is a job at Fieldhouse Studio, the imaginary company in the examples on this site.

Backup as a service

A copy somewhere your cloud provider is not.

Used on its own, a shed moves nothing and deletes nothing. It takes a copy of what you have, on a schedule, every file checked, on a node in a country you choose.

WHAT WE COPY

Servers, volumes and libraries

A file server, a NAS, an edit volume, a SharePoint library or a Shared Drive, copied as it stands.

ONE WAY, ALWAYS

Read only

A backup job only reads. It cannot write to your source or delete from it.

POINTS IN TIME

Points in time

Nightly snapshots, kept for the period you choose, that nobody can quietly alter.

For large production and media companies

A server of ours, in your building.

Where the work is big enough, a Shed node in your own building. Rushes land on it at local speed, your team works from it, and it replicates to your shed overnight.

HardwareOurs. Loaned, installed and maintained by us.
ReplicationTo the nodes named in your agreement.
If it failsWe replace it. Your copies elsewhere are unaffected.
If you leaveWe collect it and confirm what was wiped.
Pricing

Half the price of SharePoint extra storage.

Microsoft sells overflow storage by the gigabyte. Shed is priced per terabyte at half that rate, in your currency.

10 TB

Over the quota Microsoft gives your tenant, every terabyte costs £180 a month to keep in Microsoft. In a shed it costs £90.

You keep, every month
£900
£10,800 a year. £32,400 over three years.
SharePoint extra storage£1,800 a month
Shed£900 a month
Side by side

Per terabyte, per month.

Microsoft storage above your quotaabout £180 / TB
Shed£90 / TB

Microsoft's UK list price for Office 365 Extra File Storage, £0.18 per GB a month on a monthly term (£0.16 on an annual term), per terabyte per month, at last check.

Microsoft bills by the gigabyte; Shed by the terabyte kept, rounded to 100 GB. How the pooled quota works.

Per terabyte, per month
£90per TB a month
  • Unlimited people. Microsoft and Google sign-in.
  • Shed Sweep, verification reports and breadcrumbs.
  • Nightly snapshots, replicated across our nodes.
  • Previews, search, Put back, the activity record and Shed for Mac.
  • Your first library set up with you, in person.
Talk to us

Billed monthly on what you keep. No minimum term, no setup fee, no charge to leave.

FilesSame rate per TB kept. Finder, permissions, versions included.
ArchiveSame rate per TB kept. Sweep, verification and put-back included.
BackupPer TB held, priced with you. Ask.
What the price buys

Storage your team can still open.

Cold tiers freeze files. Extra cloud storage keeps paying the cloud's price.

ShedSharePoint extra storageMicrosoft 365 ArchiveA server in the office
Browse, search and previewYes, in the browserYesFrozen until reactivatedOn the office network
Frees your tenant quotaYes, the files leaveNo, you buy moreYes, at a lower rateYes
Snapshots you controlNightly, immutable 14 daysVersion history onlyNoIf you set them up
Replicated across nodesIncludedMicrosoft's ownMicrosoft's ownExtra kit and a service
Verified file by fileBefore anything is removedNoNoOnly if you script it
Who fetched whatFull record, exportableAudit log, with the right licenceAudit logRarely
Put a folder backOne stepIt never leftReactivate, then waitCopy it by hand
Up-front costNoneNoneNoneThousands, plus a backup plan
Straight answers

On price.

Is Microsoft 365 Archive cheaper?

Per terabyte, yes, at about a quarter of Extra File Storage. The files are frozen while archived and stay in the same tenant. A shed costs more than a cold tier because the files stay open to your team, outside the cloud that ran out of room. More on Microsoft 365 Archive.

We are on Google Workspace, not SharePoint.

Google's add-on storage is roughly US$30 to US$40 per terabyte a month, less than a shed. The reasons to move finished work out are the same: it leaves the live environment and its sharing links, and it is checked and snapshotted on storage built for keeping. Sweep handles Shared Drives and exports native Docs, Sheets and Slides in Office formats.

What is the catch on "half"?

None. The figure we halve is Microsoft's published rate for storage above your quota, US$0.20 per GB a month. Sterling uses the UK billing figure; other currencies are converted and rounded. Tell us the figure in yours and we price against that.

Is there a minimum, a setup fee or an exit fee?

No. You are billed monthly on what you keep, rounded to 100 GB. If you leave, everything is handed back as plain files with the manifest, and our copies are deleted within 30 days.

Shed Sweep

Archive by rule, with a person in the loop.

You set what counts as old. Sweep finds it, shows what it would move, and waits for approval. It never removes anything from your cloud without a recorded yes.

This week's sweep
Projects library
Awaiting approval
Campaigns, 2019 to 2021212.4 GB
Job folders marked closed88.0 GB
Deliverables before 202058.7 GB
Frees in SharePoint359.1 GB
Rules

Rules.

AGE

Untouched for a set time

Nothing changed for a number of years you choose.

SIZE

Over a size you choose

The heaviest folders move first, so the quota comes back fastest.

STATUS

Job codes marked closed

A naming pattern or a column in the library that says the job is done.

Mark a folder off limits and no rule touches it. Anything dropped in the Archive folder goes on the next run. Google Docs, Sheets and Slides are exported in Office formats.

A proposal

The proposal.

What moves, why it matched, what it frees. Approve it, or take folders out. The note on the right is left in the cloud.

app.shed.work/admin/sweeps/projects/2025-03-02
Projects library · proposed Sunday 01:12
Rules: untouched 3 years, job code closed, over 50 GB. Leave alone: Current, Templates.
FolderLast changedRuleSize
MoveCampaigns / 201920 Dec 2019Untouched 3 years96.1 GB
MoveCampaigns / 202018 Dec 2020Untouched 3 years71.4 GB
MoveCampaigns / 202122 Dec 2021Untouched 3 years44.9 GB
MoveJobs / FH-0412 Harbour launch03 Jun 2022Job code closed88.0 GB
KeepJobs / FH-0598 Rebrand11 Nov 2024Over 50 GB, changed recently58.7 GB
Frees in SharePoint · 4 folders · 14,210 files300.4 GB
Not theseApprove, remove after 14 days
fieldhouse.sharepoint.com/sites/Marketing/Archive/2019
Moved to Shed.txt
Left by Shed Sweep where the folder was
Campaigns moved to Shed on 3 March 2025. Browse it at app.shed.work/files/Archive/2019/Campaigns 41 folders, 6,208 files, 212.4 GB, checked file by file. To put it back, ask an owner. Questions: Mia Calder.
Live

Live.

Every pull, check, removal and index shows its progress as it runs.

app.shed.work/admin/status
Running now
Every job, live.
Pull Fieldhouse Studio · Projects library
62% · 3.1 TB of 5.0 TB · 94 MB/s · 5 h 40 m left
Check Fieldhouse Studio · Archive / 2019
Done · 6,208 files compared · 0 differences
Index Fieldhouse Studio · whole shed
38% · 41,200 of 108,500 files · reading document text
Remove Fieldhouse Studio · Jobs / FH-0412
Waiting · cooling-off ends Sunday · approved by Mia Calder
Thumbnails Fieldhouse Studio · Stills_selects
Queued
Settings

Settings.

Rules, schedule, mode, cooling-off and who to tell, per library or drive. Change a setting and the next run uses it.

app.shed.work/admin/sweeps/projects/settings
Projects library
Fieldhouse Studio · SharePoint · sweeps weekly
Propose, wait for approval ▾
Weekly, Sunday 01:00, London ▾
Untouched 3 years · job code closed · over 50 GB Edit
Current, Templates Edit
14 days before removal ▾
Clear removed files from the site recycle bin
Leave a note where each folder was
Outside 08:00 to 18:00 only ▾
mia@fieldhouse.studio, ops@fieldhouse.studio
Dry runSave
Verification

Verification.

Every file Sweep copies is compared with the original by hash before removal is offered. The report is kept with the data, and a scheduled check re-reads the shed against it.

Copy. Files are pulled over an encrypted connection into your shed, with their dates and who last changed them.
Check. Each file's hash is compared with the cloud's. Any difference is listed and the file is copied again.
Propose. The report shows what moved and what it frees. An owner approves.
Remove. After the cooling-off period, the originals are removed and the note is left. The quota comes back.
Where your files live

Your files stay on a node we own, in the country your agreement names.

New York, London, Singapore and Melbourne.

NEW YORKUnited States LONDONUnited Kingdom SINGAPORESingapore MELBOURNEAustralia YOU encrypted, straight to your node replicated between our nodes
A node we own and runEncrypted, every leg
NYC

New York United States

Node
LON

London United Kingdom

Node
SIN

Singapore

Node
MEL

Melbourne Australia

Node
Independent

All our hardware. Managed by us.

Shed is not a reseller. The servers are ours, bought outright and run by us.

OWNED, NOT RENTED

Owned outright

We buy the servers and the disks. No margin on somebody else's storage.

EVERY DISK ACCOUNTED FOR

Every disk accounted for

Disks are recorded by serial number. A replaced disk is wiped, destroyed and certified.

ENCRYPTED THROUGHOUT

Encrypted at rest and in transit

Keys held by us.

GREEN POWER

Green energy where possible

Our nodes run on green energy plans wherever one is offered.

What travels where

What travels where. All encrypted.

Into the shed. From your cloud, a browser or the Mac app straight to your node, every file checked against the original.
Back to you. Straight from your node, to a signed-in person, and the fetch is recorded.
To our other nodes. Snapshots, encrypted. The key stays with your node.
In detail

What sits where.

Your nodeThe copy
Your filesEncrypted at rest, open to your people by sign-inEncrypted snapshots
The index and activity recordHereNone
Encryption keyHeld hereNever
Who can reach itYour people by sign-in, and the people who run ShedThe people who run Shed, with the key
Who runs the machineOurs, bought outrightOurs
Security

Security.

Written to the headings tenders use. Quote any section. Where we do not hold something, such as a certification, we say so.

Encryption in transit
TLS 1.2 and 1.3, HSTS
Encryption at rest
AES-256, keys held by us
Identity
Microsoft Entra ID or Google Workspace only
MFA
Inherited from your tenant's policy
Snapshots
Nightly, immutable 14 days, kept 30
Recovery point
24 hours
Recovery time
Snapshot restore within 4 hours
Residency
A node in your country, named in the agreement
Audit record
Every action in the browser, the Finder or the app, kept 12 months after exit
Patching
Monthly, critical fixes within 72 hours
Breach notice
Within 2 working days
Exit
Plain files, deleted within 30 days
Seen in the portal

The activity record, and who can see a folder.

app.shed.work/activity
Activity
Fieldhouse Studio · everything, newest first · Export CSV
Today 10:14
Sam Okafor downloaded Campaign_Book_FINAL.pdf
Archive / 2019 / Campaigns · 412.0 MB · from 203.0.113.8
Today 09:52
Mia Calder narrowed HR to 2 people
Was: everyone at Fieldhouse Studio
Today 09:50
Mia Calder signed in with Microsoft
fieldhouse.studio tenant · MFA satisfied
Yesterday 17:03
Shed Sweep removed Jobs / FH-0412 from SharePoint
Approved by Mia Calder, cooling-off 14 days, 1,962 files verified
Yesterday 11:20
Priya Nair searched "harbour launch"
6 results · 3 opened
Mon 16:41
Shed support viewed Archive / 2020
Reason recorded: restore request #4471
app.shed.work/access
Who can see · HR
Rules apply to browsing, search, previews, downloads, ZIPs and Put back.
Everyone at Fieldhouse Studio
Only these people
mia@fieldhouse.studiofinance@fieldhouse.studio
Narrowed inside HRWho
HR / PublicEveryone at fieldhouse.studio
HR / Payrollfinance@fieldhouse.studio
CancelSave
01

Scope and how to use this page

This statement covers app.shed.work, the Shed Sweep worker, the node holding your files and its snapshot copy. It is written to the headings questionnaires use so it can be quoted section by section; where a tender needs its own format we complete and sign it from this page. Policies, the architecture diagram and restore results are available under a non-disclosure agreement.

02

Governance

One accountable owner for security, named in your agreement, approves every change to production and reviews access quarterly. Controls follow ISO 27001 Annex A and the Australian Cyber Security Centre's Essential Eight. We hold no certification and claim none; where a tender requires one we say so and describe the control instead.

03

Hosting and physical security

Your files are on a node we own in the country your agreement names, with its snapshots replicated to our other nodes. No client file sits on shared public cloud compute. There is no test copy of client data; testing uses synthetic files.

04

Encryption and key management

Files and their names are encrypted at rest with AES-256, with keys we hold. Every connection uses TLS 1.2 or 1.3 with HSTS: your browser, Microsoft and Google when Sweep reads your cloud, and between our nodes. The snapshot copy cannot read what it holds. The credentials Sweep uses to read your cloud are encrypted with a key held outside the database and never logged. Storage uses block-level checksums, so silent corruption is caught on read and on the scrub.

05

Identity and access

There are no Shed passwords. Sign-in is by Microsoft Entra ID or Google Workspace, and the tenant or domain must match your company's record. MFA, conditional access and session policy are inherited from your tenant. Admins manage access; any folder can be narrowed to named people, a group or a domain, and the rule covers browsing, search, previews, downloads, ZIPs and Put back. The people who run Shed sign in the same way, and every administrative look at a shed is written to that client's own activity record.

06

Application security

The web application cannot write inside a shed: every change is a recorded job carried out by the worker, with version history and snapshots behind it. Nothing is deleted outright; removals go to a bin kept for 30 days. Each company's shed is its own storage path and its own rows, enforced in the database as well as the application. Signed host-only cookies, a CSRF token on every form, security headers, rate limits and a content security policy at the edge. Secrets live outside the code. Client-arranged penetration tests against a staging shed are welcome with notice.

07

Data integrity and verification

Before anything is removed from your cloud, every file is compared with the original by hash and the report is kept with the data. A manifest of every path, size and hash is kept for each shed, and a scheduled check re-reads the shed against it. Removal from your cloud is a separate, approved step with a cooling-off period you set.

08

Backup, recovery and continuity

Snapshots nightly, kept 30 days and immutable for the first 14, replicated across our nodes. Recovery point 24 hours; a snapshot restore of any folder within 4 hours of request. Because the application cannot write to the shed and the copy uses separate credentials, a compromised workstation cannot encrypt or delete the archive.

09

Logging and monitoring

Every sign-in, listing, search, preview, download, ZIP, Put back, access change and administrative action is recorded with who, when, what and from where. Owners see the record and can export it. It is kept for the life of the shed and 12 months after. Storage, replication, snapshots and the application are monitored with alerts to us; the status page is updated by hand.

10

Incident response

We tell you within 2 working days of learning of a security incident affecting your shed: what is known, what has been done and what we need from you, with a written report when it is closed. Incidents notifiable under the Australian Privacy Act, the UK GDPR or the GDPR are handled within those timeframes. A named contact on each side is agreed at setup.

11

Vulnerability and change management

Operating systems, containers and dependencies are patched monthly; critical fixes within 72 hours of release. Every production change is made from the versioned stack and recorded with who and when. Changes that affect your data path are announced on the status page.

12

People

A small named team, each under a confidentiality agreement, with access granted for the work in hand and reviewed quarterly. Nobody at Shed opens or analyses your files beyond what listing, search, preview and verification need.

13

Subprocessors

Microsoft and Google provide identity and are where your files come from, under their own terms. Sign-in and the index run on a server rented from one hosting provider, named in your agreement and in our privacy statement; it never holds a file. There are no other subprocessors, and we give 30 days' notice of any change.

14

Data lifecycle and exit

Your files are plain files on plain storage. Take everything with you at any time, as a download or on a drive we ship, with the manifest. If you leave, we delete our copies, snapshots included, within 30 days and confirm it in writing. Nothing is deleted from a shed without a recorded request from your Admin.

15

Privacy and law

Shed is a processor for the personal information inside your files and a controller only for the sign-in and activity record described in our privacy statement. The Australian Privacy Act applies; the UK GDPR and the GDPR apply to UK and EU clients and a data processing agreement is available. The law of Victoria, Australia governs the agreement.

For tenders

Everything a questionnaire asks for, in your format.

Send the questionnaire and we complete and sign it from this page, usually within three working days. Under a non-disclosure agreement we also provide the items on the right.

Ask for the tender pack
Available under NDA
  • Information security, access, incident, backup and change policies.
  • The architecture and data flow diagram.
  • The latest snapshot and full restore test results.
  • The subprocessor list.
  • A data processing agreement for UK and EU clients.
Questions

Before you move anything.

Does moving files to Shed actually free our SharePoint quota?

Yes, once the files leave the site recycle bin, which we can do as part of the removal. One exception: if a retention policy covers the site, SharePoint keeps deleted items in a hold library until the policy expires. We check this for every library before quoting a saving.

Can our people still find things?

Everything is browsable and searchable in the browser, with previews for images, PDFs, video and Office documents. Folders download as a ZIP, and anything can be put back where it came from in one step.

Who can see what?

Everyone at your company who can sign in, unless an Admin narrows a folder to named people, a group or a domain. People outside your Microsoft tenant or Google domain cannot sign in at all.

What happens if you disappear?

Your files are plain files on plain storage, with a manifest listing every path and hash. They can be handed over on a drive or copied to any destination you name.

What does Sweep need access to?

For Microsoft 365, an app registration in your tenant with read access to the sites you choose, and write access only to leave the note and remove approved files. For Google Workspace, a service account with access to the Shared Drives you choose. You grant it, you can see it, you can revoke it.

Can someone stop a sweep?

Yes, at any point before the removal. That is what the cooling-off period is for. The copy stays in the shed and the originals are untouched.

Before a move: how to archive a SharePoint library without breaking links, and what to do when the tenant is about to go read-only.

Talk to us

Start with one library.

Tell us which libraries or drives are full and roughly how large. We size a shed and set up the first sweep with you.

Ask for the tender pack

Tell us who you are and what the questionnaire needs. We answer from the security statement on this page, usually within three working days.

What do you need?

Goes to one mailbox at Shed. No newsletter, no third party.