OrthoVirginia Replaced ADP-Hosted SFTP With Its First Owned Transfer Layer on Files.com

OrthoVirginia is Virginia's largest provider of orthopedic medicine and one of the largest orthopedic specialty practices in the country, with more than 150 orthopedic specialists in more than 35 locations and surgery centers, diagnostic imaging, and physical, hand, and occupational therapy built into the practice. It is physician-owned and independent, and behind the clinical operation sits an enterprise back office at real scale. Payroll goes to banks. Benefits enrollment goes to plan administrators. Retirement contributions go to 401(k) vendors. Provider licensing data feeds internal systems. Every one of those movements is a file, on a schedule, passing between OrthoVirginia's HR system and somebody else's.

And for its entire history, OrthoVirginia had never owned the layer those files moved on. Every SFTP endpoint it depended on was hosted by a third party.

That had to change in 2025, when OrthoVirginia consolidated six to eight legacy applications onto Workday. Workday would not host any of the SFTP endpoints required by 72 integrations, leaving a three-person enterprise applications team to build the first transfer layer OrthoVirginia had ever owned.

Seventy-Two Integrations and No Endpoints to Run Them On

Most of that hosting came with ADP. The SFTP site behind the majority of OrthoVirginia's HR integrations belonged to ADP and ran on ADP's terms. The rest of the endpoints belonged to the counterparties themselves.

“We would always depend on somebody else.”

The one exception was a pre-packaged FTP server stood up from a cloud marketplace image, moving a single file between two systems, unadministered and unpatched. That was the whole estate.

The 72 integrations coming in or out of the new HR system included scheduled feeds to banking, benefits, and 401(k) vendors and to internal systems such as ServiceNow and Epic, carrying HIPAA-regulated data. When ADP retired, the endpoints those feeds ran on retired with it. Without a transfer layer of its own, the consolidation could not complete, because every one of those feeds would lose its transport the day the old system went dark.

The counterparties each had their own requirements, including a national banking partner that mandates PGP-encrypted delivery, and the endpoints had to exist as each Workday module went live, on a program timeline the team did not control.

What OrthoVirginia needed was a file transfer layer it owned outright: dedicated endpoints under its own name, a separate space and separate credentials for every counterparty, an audit trail that attributes both sides of every transfer, encryption handled inside the platform rather than in scripts, and all of it live in time for the first Workday feed. Files.com met that combination of requirements and became the first file transfer platform the organization had ever owned.

One Site, a Folder and Two Accounts for Every Integration

Files.com became the single endpoint every counterparty connects to when OrthoVirginia supplies the endpoint: one site, running under OrthoVirginia's own branded domain with dedicated IP addresses, structured so that dozens of integrations stay separate, permissioned, and attributable.

The structure was set before the scale arrived. A subfolder isolates each integration, while two accounts—one for each side of the exchange—make every action attributable. Administrators sign in through OrthoVirginia's Entra ID single sign-on. External vendors and system accounts get password credentials scoped to their own folders and nothing else.

The first two workflows went live immediately. A one-directional feed carries current provider licensing data from CredentialStream into ServiceNow on a schedule, with no one touching it. A second channel let finance and project staff exchange sensitive Workday project files with the outside consulting group running the implementation, internal staff through the web interface behind SSO and consultants over SFTP. That channel was deliberately temporary and ended with the project. From there, integrations were added as each Workday module deployed: HCM, then Finance, then supply chain.

Encrypted Bank Files, Decrypted on Arrival

One of OrthoVirginia's national banking partners requires PGP-encrypted file exchange. The usual way to meet that mandate is GnuPG scripts and a private key sitting on a server somebody has to maintain. On Files.com it is a folder configuration. The keys live in the Files.com GPG Key Manager. The bank delivers encrypted files over SFTP, Files.com decrypts each file automatically on arrival, and Workday pulls the cleartext on its normal schedule. Workday never handles a key, the bank never changes how it sends, and no one on the team runs a decryption step by hand. The exchange was designed in April 2025 and running in production by autumn 2025.

The Standard SFTP Provider for ERP Integration

By October 2025, with the Workday program through its major go-lives, OrthoVirginia had replaced a patchwork of vendor-hosted endpoints with a single transfer platform it operates itself.

“You're our standard SFTP provider now.”

• Six to eight legacy applications were retired in the consolidation, ADP among them.
• Roughly half of the 72 Workday integrations identified at onboarding were scoped to Files.com, everywhere OrthoVirginia rather than the counterparty supplies the endpoint, and they came online as each Workday module deployed.
• Scheduled feeds between Workday and its banking, benefits, and retirement-plan vendors run unattended, with an audit log that attributes both sides of every transfer of HIPAA-regulated data.
• Encrypted exchange with its banking partner runs end to end, with no key or file touched by hand.

The result that compounds is the pattern. Onboarding the next vendor is a subfolder, a pair of credentials, and, where the partner requires it, an encryption key, all on a platform that already exists. There is no hosting arrangement to negotiate and no third party to wait on. A three-person enterprise applications team operates the entire estate.

A File Transfer Layer of Their Own

Today, the enterprise applications team controls OrthoVirginia's Files.com site and the integrations running through it. The Workday migration could have rebuilt the old dependency counterparty by counterparty, each partner hosting its own piece of OrthoVirginia's file transfer. Instead the practice stood the layer up once, on Files.com, and each integration for which the practice supplies the endpoint has landed on it.