Porsche Cars North America Puts Every External File Exchange on One Security-Owned Files.com Channel

Porsche Cars North America (PCNA) is the exclusive U.S. importer and distributor for Porsche AG. From its Atlanta headquarters, the company supports Porsche’s North American dealer network with sales, marketing, parts, service, and training.

A national sales company builds no cars. Its work runs through outside parties: agencies that produce marketing collateral, vendors that supply services and data, dealers and workshops that send documents in, business partners that exchange files with the legal department. And as a wholly owned subsidiary of Porsche AG, PCNA does all of it under the parent company’s security rules, including strict guidelines on where and how files may be hosted. Every one of those relationships needs files to cross the company boundary, and the information security team wanted one governed channel for all of them.

One Channel for Legal, Marketing, and Vendor Exchange

External file exchange ran across teams and tools, each with its own access to manage, and the information security team wanted one place to see and manage who had access to what.

Any channel for the whole business had to clear the parent company’s hosting security guidelines. It had to authenticate users through single sign-on federated through Porsche AG’s identity estate. It had to carry Porsche’s own branding, meet partners’ data-location requirements, and serve needs as different as legal document collection, marketing collateral review, and vendor file transfer on a single platform.

When legal needed a way to collect documents from vendors and business partners, the information security team set out to stand up one sanctioned tool for the whole business. The team selected Files.com to be that channel, and business units would expand its use without an internal campaign.

One Governed Site Behind Porsche’s Identity and Brand

What the security team built is a single front door for files crossing the company boundary, run under Porsche’s name and Porsche’s identity system.

Internal users sign in through single sign-on against Microsoft Entra ID, federated through the parent company’s identity estate, so access to the file platform is corporate identity rather than another account to manage. The site runs on a branded Porsche domain, so an agency or vendor who receives a link sees Porsche, not a third-party tool. The site’s storage sits in Files.com’s Canada zone, chosen to meet partner data-location requirements.

Inbound documents arrive through Files.com Inboxes. A partner uploads through a branded page without creating an account, the files land in a controlled folder structure, and received material moves into SharePoint, PCNA’s internal system of record. During onboarding, the legal team learned to configure its own Inboxes for collecting documents from vendors and business partners.

Outbound and iterative sharing runs on Share Links. Marketing, customer relations, and PR exchange collateral with outside agencies, sending drafts out and taking revisions back through the same governed site. It is the largest single body of activity on the platform. For some vendors, file exchange moved from FileZilla desktop clients to SFTP on the same governed site.

Access is deliberately pull-based. The security team does not promote the tool internally. An employee who needs to share files externally requests access against a stated use case, and the team grants it on the platform it already governs.

The Channel Security Owns Is the One the Business Asks For

With the site in production, PCNA runs one sanctioned, auditable channel for external file exchange.

• External sharing for legal and compliance, for marketing, PR, and customer relations, and for IT runs through one platform the security team owns, with every exchange on the record.
• Documents from partners and vendors land in controlled Inboxes and flow into SharePoint.
• Some vendors that once needed a FileZilla FTP client on a PCNA desktop now exchange files over SFTP against the governed site.
• Porsche reviews its vendors every year, and Files.com’s SOC 2 Type II report and bridge letter satisfy that review.

The internal user base grew substantially in a single year, with no internal promotion at all. Business units bring their use cases to the security team because the sanctioned channel is already there: compliant, branded, and connected to corporate identity.

Adoption Without a Mandate

PCNA did not drive adoption with a mandate. It stood up one Files.com channel that clears Porsche AG’s hosting rules by construction, made it easy to get, and let demand do the rest.