Security

Secure Image Delivery

ArkDeploy treats Windows images as sensitive artifacts. Every delivered image is transferred securely and includes integrity verification so customers can independently confirm that the image they receive is complete and unmodified.

This page outlines how ArkDeploy delivers Windows images and what customers can expect as part of the handover process.

Secure Delivery Method

Final Windows images are delivered using secure, encrypted file transfer with controlled access.

  • Encrypted cloud storage is used for delivery
  • Download links are password protected
  • Links are time-limited and automatically expire
  • Passwords are shared separately from the download link

Where preferred, ArkDeploy can also deliver images via customer-provided secure storage such as OneDrive or SharePoint.

Offline Build and Handling

All ArkDeploy images are created, serviced, and tested on a closed, offline build network.

  • Images are never exposed to the public internet during build or validation
  • No third-party installers or bundled tooling are introduced
  • Only explicitly agreed components are included

Images are uploaded for delivery only after the build and validation process is complete.

Image Integrity Verification

Every delivered image includes an integrity hash so customers can verify the file after download.

What Is Included

  • The final Windows image file (.wim or .esd)
  • A corresponding SHA-256 hash file

The hash file contains the cryptographic hash value and the exact filename it applies to.

How to Verify the Image

Customers can verify image integrity using standard Windows tools.

PowerShell

Get-FileHash -Algorithm SHA256 <filename>

CertUtil

certutil -hashfile <filename> SHA256

If the calculated hash matches the supplied value, the image has been transferred correctly and has not been modified.

Delivery Confirmation and Retention

After delivery:

  • Customers are encouraged to confirm successful download
  • Delivery links are allowed to expire or are revoked
  • ArkDeploy does not retain copies of customer images

Images are only retained if explicitly agreed as part of ongoing or repeat work.

Why This Matters

  • Reduces the risk of corruption or tampering
  • Supports audit and compliance requirements
  • Ensures confidence in deployed images

This process is part of ArkDeploy’s standard delivery approach and is not an optional add-on.

Start Here

Questions About Secure Delivery?

If you have specific delivery or security requirements, feel free to raise them during your enquiry and ArkDeploy will be happy to accommodate where possible.