Manage storage and hidden files effectively It's no longer optional, neither for businesses nor for advanced users. Every day we generate invoices, photos, backups, legal documents, emails with huge attachments, and personal data that, if not organized properly, end up being chaos… or a serious security risk.
Furthermore, the problem isn't just spaceThere's also productivity (not being able to find anything when you need it), regulatory compliance (GDPR, commercial and tax obligations), confidentiality, and, of course, the cost of having clouds, disks, and backups full of files that no one uses. In this guide, we'll take a close look at how to classify information, how to store it locally and in the cloud, how to handle hidden folders and files, and what policies you need to keep your entire system from spiraling out of control.
Types of information and security levels
Before you start creating folders and hiring cloud services like crazy, you need to be clear on this. What type of information do you handle and what level of protection does it require?Not all files are equally critical.
A very practical classification for any business distinguishes between confidential, internal and public informationEach category indicates the level of security, who can access it, and how it is stored.
- ConfidentialThis includes particularly sensitive data (employee and customer personal information, employment histories, payroll, private contracts, credentials, detailed financial information, critical legal documentation, etc.). Access to this data must be authorized. very restricted, with permission controls, encryption, and access loggingSharing this type of data with third parties without express authorization (and without legal basis) is a ticking time bomb at a legal and reputational level.
- InternalDocumentation necessary for the day-to-day running of the business, but which doesn't need to be seen by the outside world. This includes internal procedures, manuals, work protocolsProject documentation, security policies, internal minutes, progress reports, etc. Generally, it is shared only among employees or collaborators, but it should not leave the organization without control.
- PublicInformation designed to be visible: web content, posts blog posts, sales brochures, marketing materials, leaflets, press releasesSocial media communications, public email campaigns, etc. It requires the lowest level of security, although it's still advisable to have it organized to avoid going crazy.
Depending on the type of data, the company will have to apply different protection criteriaFrom highly secure, encrypted folders to public repositories and downloadable materials, this classification fully aligns with GDPR requirements and basic security logic: the more sensitive the information, the more layers of control you must apply.
Legal obligations for the preservation of documents
In the business world, you don't just keep files for fun. There are documents that you are required to keep for years, due to both commercial and tax regulations, as well as others that require long-term preservation as long as the business exists.
In the commercial sphere, the Article 30 of the Commercial Code It requires business owners to keep books, correspondence, documentation and supporting documents related to their business. during six years Starting from the last entry, unless otherwise specified. This includes accounting books, minutes, company minutes books, etc.
On the fiscal front, the General Tax Law (especially Article 29 and Articles 66 to 70) establishes that accounting books and other tax books or records (Personal Income Tax, VAT, Corporate Income Tax, etc.) must be kept, in general, for the tax statute of limitations, normally four yearsDuring that time the Administration can review and verify that data, so throwing it away prematurely is a serious mistake.
Furthermore, Some documents must be kept for the entire life of the business: visitor books, certain inspection reports, deeds of incorporation, census variations, registry documentation, tax identity documents (CIF/NIF) and, in general, everything that proves the existence and legal evolution of the company.
There are also specific obligations regarding the computer programs, files and archives These records support accounting and tax returns. They must be stored in a way that ensures the data is accessible and readable, even if encrypted or encoded, and be capable of being converted to readable formats upon request by the tax authorities.
In addition to this, there is a second group of documents that preserves for personal gainThese include: customer and supplier relationships, commercial contracts, budgets, projects, reports, manuals, questionnaires, internal procedures, marketing materials, etc. There is not always a legal obligation to keep them, but from an operational standpoint, it's in your best interest to keep them properly filed.
Document management and archiving: why it's key to your productivity
Most professionals and companies face the same problem: mountains of papers, chaotic digital folders and duplicate documentsThis translates into wasted time, stress, and poor decision-making.
Document management, both paper and digital, should continue a clear and simple procedureThat procedure defines what is archived, how it is classified, who does it, where it is stored, and how long it is kept. The difference between "I can't find anything" and "I'll have it in 10 seconds" lies there.
In the physical section, a file based solely on A-Z folders and filing cabinets It has clear drawbacks: lost documents, increased space and infrastructure costs, slow search times, difficulty sharing, and limited flexibility. With the current volume of documentation, continuing to rely solely on paper is shooting ourselves in the foot.
That's why more and more businesses are moving towards a paperless officewhere relevant documentation is digitized, classified and stored in electronic systems (local, networked or in the cloud) with a clear structure, quick searches, permission control and automated backups.
Paperless office and smart digitization
A “paperless office” doesn’t mean you never print anything, but rather that The main support for your documentation is digitalwith paper reduced to the bare minimum (for example, originals that the law requires to be kept in physical format).
Among the advantages of adopting this approach is the reduction of infrastructure and material costs (filing cabinets, cupboards, square meters, paper, ink, postal shipments), improved speed in locating documents, the possibility of automating processes, and much greater mobility for remote or hybrid teams.
To make the leap you need, at a minimum, a computer, a scanner, and a file managersIn addition to a storage strategy (local, server, cloud, or a combination), and perhaps even more importantly, a change in mindset: recognizing that a well-archived digital document has the same operational validity as a paper document, and often much greater utility.
It is very common to support this model in cloud storage services (Google Drive, OneDrive, Dropbox, MEGA, etc.), combined with controlled local storage. This way you benefit from accessibility, collaboration, and remote backups, without losing internal control.
Folder structure and naming convention: the “skeleton” of your archive
Digitizing for the sake of digitizing doesn't solve anything if you then save everything in a folder called "Several"You need a document archive "skeleton," that is, a folder structure by levels and a clear, simple, and repeatable naming convention.
A common example used in SMEs and law firms is to create master folders by large areas and, within each one, subfolders by year, client, project, etc. Some typical folders might be:
- Corporate documentsDeeds, tax identification numbers (CIF and NIF of representatives), business registration, Social Security registration, insurance policies, bank contracts, licenses, property documents, notarial deeds, official registry certificates, etc. Although many of these documents are on paper, it is very useful to have them in digital format. digital copies so that they can be sent to banks, administrations or suppliers quickly.
- Accounting documentsThese include issued invoices, received invoices, cash and bank documents, accounting statements, general ledger listings, etc. They are usually organized by fiscal years (year) and, within, by type of document or month.
- tax documentsVAT returns, personal income tax returns, corporate tax returns, annual summaries, communications from the Tax Agency, and other tax-related documentation. Here too, organizing by fiscal year is the most logical approach.
- labor documentsContracts, registrations and terminations, payroll, social security, registration book, visitor book, social security communications, etc. Again, organized by year and often by employee.
- Clients and suppliersFolders by client and by supplier with orders, quotes, delivery notes, commercial contracts, relevant emails, shared documentation and invoices.
- Business correspondence and documentationLetters, claims, offers, campaigns, significant newsletters, attached documentation sent or received that you wish to keep for reference.
Alongside the structure, it is key to define a homogeneous nomenclature For folders and files: short, clear, and direct names; use of dates in sortable format (e.g., YYYY-MM-DD), inclusion of meaningful keywords, and optionally, color patterns or labels if the tool allows it.
A typical criterion might be something like “CLIENT_NAME_2024-06_INVOICE_001.pdf” or “PROY_PROYECTO_X_MEMORIA_TECNICA_v02.docx”. The important thing is that, without opening the file, you can guess what it contains and that everyone on the team understands and follows the pattern.
Storage policies and protected folders
It's not enough to have a nice-looking scheme: you have to define storage and saving policies that everyone in the organization knows and follows. This includes where each type of file is stored, what can be deleted and when, and how devices are used.
In local work, for example, you can decide that only active documentation is saved in certain folders on the computer, which are periodically updated. clean up obsolete files and that the final documentation be uploaded to the server or the corporate cloud. On a network, it is advisable to establish a clear system for organization, naming conventions, departmental areas, and deletion permissions limited to authorized personnel.
Regarding the external devices (pendrives, USB disks)Many companies advise against their use except in very specific cases, due to the risk of loss, theft, or malware. If they are used, they must be reviewed periodically and not become "catch-all" repositories of critical information without backups elsewhere.
To strengthen security, operating systems allow the creation of protected folders with various techniques:
- Passwords: Protect compressed folders or specific documents with a password to prevent anyone from opening them.
- content encryptionEncrypt the contents of folders or entire drives so that only those with the certificate or password can access them. In Windows, this is usually managed from Properties > Advanced > Encrypt Content; in macOS, with FileVault, from System Preferences > Security & Privacy.
- Hide files and foldersMark certain items as hidden so they don't appear in plain sight in the file explorer. However, you can simply enable "show hidden files" to see them, so it's a minimal layer of obfuscation, not real security.
Some hosting panels and professional solutions also include specific tools for Protect directories with passwords, encryption, and access rulesThis is especially useful for data hosted on web servers or internal applications.
User permissions and access management
One of the cornerstones of good file management, whether for visible or hidden files, is control. who can view, edit, delete, or execute each resourceThis is where user permissions and roles come into play.
In systems like Windows, macOS, or network file managers, you can assign different permissions to users and groups: from total control (owners and administrators), including permissions from read, write/modify or execute...to the total lack of access.
In practice, this means, for example, that a folder with HR documentation is only accessible to HR personnel and management; that client folders can only be modified by the relevant team; that certain tools can only be installed or run by administrators; or that a new user always enters with a minimum access role and has it expanded if necessary.
For Windows, these permissions are configured from Properties > Security of folders and files, while in macOS they are managed from the information window (CMD+I) in the "Sharing & Permissions" section. In corporate applications and enterprise clouds, they are usually defined roles (admin, editor, read-only, guest) with predefined permissions.
Cloud storage: advantages, risks, and choosing a service
Storing files in the cloud is now commonplace: Google Drive, OneDrive, Dropbox, MEGA and other services allow you to store documents, share them and work collaboratively without depending on a single computer or physical server.
In business environments, however, simply “having them in the cloud” is not enough. A [system/platform/etc.] is needed. clear usage strategy: what is uploaded, who accesses it, how it is organized, what is shared with third parties, what is backed up separately, and what happens if the provider decides to fail or cancel the account tomorrow.
When evaluating a cloud storage service, it's important to consider several key points:
- Security measures: encryption in transit (HTTPS) and at rest, firewalls, intrusion detection systems, two-step authentication, access and activity auditing tools, etc.
- Access control and permissions: possibility of granting access only to specific users, limiting read/edit permissions, restricting downloads, expiring links and revoking access.
- Location and regulationsWhere the data is hosted (EU, US, other countries) and what legislation applies. For businesses subject to GDPR, it is crucial that the provider complies with European regulations or has adequate safeguards.
- Plans, costs and scalability: how much space you need now, how your usage will grow, whether a limited free plan or a paid plan with centralized administration, multi-user management and support is worth it.
- Integrations and ease of useIntegration with office suites (Google Workspace, Microsoft 365), productivity apps, CRM, project managers, and that it is easy enough to use for the team to adopt it without resistance.
Using multiple suppliers simultaneously without a plan can lead to losing track of where everything is. Ideally, you should standardize into one or two services main ones, define its use and prevent each department from inventing "its own cloud" without notice.
Gmail, Google Drive and the shared storage problem
A very specific, but extremely common, case is that of running out of space in GmailThe free 15GB limit is shared between Gmail, Google Drive, and Google Photos; that is, emails, attachments, documents in Drive, and photo backups compete for the same space, as do local copies of apps like WhatsApp.
When you run out of space, the consequence is immediate: Gmail stops sending and receiving emailsGoogle Drive won't let you upload new files, Google Photos will stop syncing, and you can't create new documents in Google Docs, Sheets, etc. If you exceed the limit for two years, Google may even permanently delete your content.
To understand what is occupying the space, Google offers the Google One Storage Managerwhich details how much Gmail, Drive and Photos consume, and suggests cleaning actions (spam, trash, emails with large attachments, heavy photos and videos, etc.).
One of the main “culprits” are usually the large attachments in old emailsIn Gmail, you can find them with searches like “has:attachment larger:10M” or “larger:25M”, combined with age filters (“older_than:2y”). You can also search by file type, for example, “filename:.pdf larger:5M”. After identifying these emails, you can delete them in bulk (by checking “Select all conversations that match this search”) and, very importantly, Empty the Recycle Bin and SpamBecause until you do it, the space won't be freed up.
Another major space drain is the promotional emails and newslettersThese messages accumulate for years without adding any value. Filtering by “label:promotions” and deleting old messages from specific senders (“from:amazon.com older_than:1y”, for example) usually frees up gigabytes in just a few minutes.
Archiving emails in Gmail is useful for clearing your inbox, but does not free up storageThey only change location (to "All"), they still count towards the quota. If you want space, you have to delete them and empty the trash.
Automate and predict: filters, labels, and good habits
Thorough cleaning can get you out of a pinch, but if you want to stop living in crisis mode you need automate and change habitsIn Gmail and other email platforms, you can create filters that automatically classify, archive, or delete certain messages: old newsletters, promotional emails, system notifications, etc. For mobile devices, there are also apps that help with this. clean storage and improve performance.
For example, a filter that sends all emails from a specific newsletter directly to a particular label, or that marks as read and archives push notification emails that you only want to check occasionally. You can also apply filters to existing emails to facilitate regular cleanups.
Another very powerful tool is the colored labelsThese labels allow you to categorize messages by project, client, task type, or urgency (red for today, orange for this week, yellow for this month, etc.). Unlike traditional folders, an email can have multiple labels without duplication, which aligns perfectly with how we actually work.
At the same time, it's a good idea to review and clean up your subscriptions: every newsletter you don't read is wasted space and noise that drowns out important emails. To unsubscribe without mercy Getting rid of newsletters that no longer provide you with anything is one of the best investments of time in email management.
Backups: your disaster insurance
It doesn't matter how well you organize your data: Without regular backups, you're one mistake away from losing everything.Accidental deletion, ransomware, a failing hard drive, a compromised account… Backups are the safety net that makes the difference between a scare and a tragedy.
The recommended course of action is to apply the well-known 3-2-1 rule: at least three copies of your data, on two different media (e.g., local server and cloud), and one copy outside the main location (another cloud, a data center, a disk stored in another location, etc.).
On Windows, you can configure backups in the Control Panel (Backup and Restore), and on macOS with Time Machine and other tools. Many hosting and server providers offer [options/services]. automatic self-service backupswhich allow you to quickly restore files, databases, or entire websites to specific dates.
If you use cloud services like Dropbox, OneDrive, or similar, you can also take advantage of their features. versioning and recovery of deleted fileswhich adds another layer of security against human error. The key is that backups are made automatically and periodically; if they depend on someone remembering, they will eventually fail.
Security, personal data and level of protection
When you manage files that contain personal data (clients, employees, users, subscribers, collaborators, etc.), the GDPR and all data protection regulations come into play. It's not just about storing documents properly, but about to ensure that the treatment is legal, safe and proportionate.
Among other things, you need to classify the data according to its sensitivity, apply appropriate technical and organizational measures (encryption, strong passwords, access control, activity logs, staff training), regulate third-party access (consultants, suppliers, cloud services) through data processing agreements and have procedures in place to address the rights of interested parties (access, rectification, erasure, etc.).
This directly affects how you organize your document archive: which documents are stored in protected folders, who has permission to access them, how long they are kept, how they are destroyed when they are no longer needed, and what mechanisms exist to export or consult them in an orderly manner.
Delegating file management: the role of the virtual secretariat
In many SMEs and sole proprietorships, the problem is not knowing what to do, but have time and a method to do itThe classification, digitization, archiving, cleaning and sending of documentation consumes hours that are not normally part of the 20% of tasks that generate 80% of the results.
An increasingly common option is Delegate the management of the document archive to a virtual secretary or a specialized professionalThis role involves collecting documents, digitizing them, labeling them, storing them in the appropriate place, maintaining the folder structure, applying conservation policies, and searching for and sending documentation to clients, suppliers, banks, or consultancies when necessary.
For it to work, it is essential to define together a clear method and a work protocolThis includes defining what goes into the archive, how it's decided which folder it goes in, what name it's given, what is kept, what is destroyed, and how confidential documents are handled. Once the system is defined, the designated person must have sufficient autonomy to manage it professionally.
The result is usually more time for strategic tasks, less stress, a better sense of control, and a much faster response when a client, a bank or the administration asks you for a document "for yesterday".
With consistent categorization, good security practices, intelligent use of the cloud, well-planned backups, and, if necessary, external support to keep the system running, managing your storage (including those hidden files that will now be under control) goes from being a constant source of chaos and scares to becoming a solid piece that supports your productivity and the security of your business. Share this information so that more people can learn about the topic.
