Support for Macro-Enabled Files in JAVLN Officetech

Summary

JAVLN Officetech does not support the storage or execution of Microsoft Office macro-enabled files (e.g., .xlsm, .xltm). This article explains the security risks associated with these files and the specific file types involved.

1. What are macro-enabled files?

Macro-enabled files are Microsoft Office documents (such as Excel spreadsheets or Word documents) that contain embedded code written in Visual Basic for Applications (VBA).

While standard files (like .xlsx) only store data, macro-enabled files can perform automated tasks, such as calculating insurance premiums, generating quotes, or pulling data from external APIs. Because they can execute code, they function differently than standard documents.

2. Why JAVLN does not support macro-enabled files

JAVLN adheres to a Zero Trust security principle, assuming no file is safe until proven otherwise. Consequently, our internal security protocols prevent the support of macro-enabled files for the following reasons:

• Security Risk & Attack Vector: Macros are a well-established vector for cyberattacks. They are frequently exploited to embed malicious code that can grant unauthorised access, steal sensitive credentials, or initiate ransomware payloads.
• Attack Surface Reduction: By blocking macros by default, JAVLN significantly reduces the "attack surface," limiting common entry points for malware to enter the secure cloud environment.
• Compliance Standards: Disabling macros aligns with industry best practices and compliance frameworks, including ISO 27001, NIST and the ACSC Essential 8 strategies for mitigating cyber incidents.

3. Supported vs Unsupported File Extensions 

Users attempting to upload or save macro-enabled files to Officetech may experience file corruption, conversion errors (stripping the macro), or "file locked" errors.

Supported Files (Safe to Store):

• Excel: .xlsx (Standard Workbook)
• Word: .docx (Standard Document)
• PowerPoint: .pptx (Standard Presentation)

Unsupported Files (Blocked/Risky):

• Excel Macros: .xlsm (Macro-Enabled Workbook), .xltm (Macro-Enabled Template)
• Word Macros: .docm (Macro-Enabled Document), .dotm (Macro-Enabled Template)

4. Recommended Workarounds

If your business processes rely on Excel macros (e.g., for rating engines or premium calculators), we recommend the following workflows to maintain security while ensuring functionality:

If a specific file requires embedded macros to function (e.g., a complex third-party actuarial or rating engine tool), it should be stored outside of JAVLN Officetech.

• Store these specific files on a secure local server.
• Use JAVLN Officetech strictly for the final outputs (e.g., saving the generated quote or policy PDF).