2/24/2018 S-1 Table of Contents servers, Dropbox uses Secure Sockets Layer, or SSL, and Transport Layer Security, or TLS, for data transfer, creating a secure tunnel protected by 128­bit or higher AES encryption. • File recovery. Every deletion event in Dropbox is recorded, including when groups of files are deleted. Users can easily recover files through our web interface. Dropbox Plus subscribers may recover prior versions for up to 30 days after deletion, and Dropbox Professional and Dropbox Business subscribers may recover prior versions for up to 120 days after deletion. Administrator controls. Dropbox Business team administrators have many ways to customize security settings in both global and granular ways. • Sharing permissions: Team administrators can set up and monitor how their members share team folders, and can set sharing permissions on all folders, sub­folders, and links through the sharing tab. • Remote device wipe: Team administrators can delete their organization’s Dropbox content from a member’s linked devices, which is especially useful should someone lose a device or leave the team. • Audit log: Team administrators can monitor which members are sharing files and logging into Dropbox, among other events. They can review activity logs, create full reports for specific time ranges, and pull activity reports on specific members. Advanced and Enterprise team administrators have access to audit logs with file­event tracking. • Device approvals: Advanced and Enterprise team administrators can manage how members access Dropbox on their devices. • Tiered administrator roles: Advanced and Enterprise teams have the ability to set multiple administrator roles, each with a different set of permissions. • Network control: Enterprise team administrators can restrict personal Dropbox usage on their organization’s network. Third­party security integrations. We’ve partnered with industry­leading third parties to enable us to provide a wide range of IT processes and satisfy industry compliance standards, including: • Security information and event management: Allows Dropbox Business administrators to oversee and manage employee activity, and access sensitive data through the administrator page. 104 https://www.sec.gov/Archives/edgar/data/1467623/000119312518055809/d451946ds1.htm 112/235