HRI Dental & Vision Holds Its 834 Enrollment SFTP Endpoint in Its Own Name on Files.com

HRI Dental & Vision provides dental and vision benefits to roughly 250,000 members. It operates as part of ProMedica Health System.

Coverage starts with enrollment, and enrollment arrives as data. Agents, producers, and EDI vendor groups send ANSI X12 834 enrollment files, the standard EDI format for membership enrollment, into HRI, where a dedicated team receives, validates, and processes them. Each sender runs its own automation against HRI's intake point, on its own schedule, under its own security policy.

For a company whose partners connect to it by machine, every day, the question of who holds that connection point is not abstract. HRI wanted its exchange point held under its own agreement, in its own name, on infrastructure no other part of the company runs.

Every Partner Automates Against One Address

For years, the exchange point for all of that partner traffic was an internal file server running PGP encryption, operated on infrastructure elsewhere in the company. Moving off it meant moving every connection: partner accounts, encryption keys, IP restrictions, and, on the far side, the automation each agent and vendor group runs against HRI's endpoint. None of that automation belonged to HRI, so each partner had to be moved individually.

What HRI needed was an exchange point it holds in its own name, so the address partners automate against never has to move again. It had to sit under HRI's own agreement rather than inside any other unit's infrastructure, speak the SFTP its partners already automate against, carry HRI's own brand, satisfy each vendor's security mandate, and be covered by a HIPAA business associate agreement. HRI selected Files.com to be that platform.

An SFTP Endpoint Held in HRI's Own Name

HRI's own EDI specialist ran the cutover onto Files.com-hosted SFTP, at an address carrying HRI's own brand, so partners connect to HRI rather than to a third-party tool. The agreement sits with HRI itself, with a HIPAA business associate agreement and encryption processes in place from the start in 2016.

Partner connections were rebuilt incrementally, and HRI runs the onboarding itself. HRI scripted the account side against the Files.com REST API and .NET SDK years ago, so user creation and folder provisioning for each new group run as code; HRI then applies whatever notifications, keys, or IP restrictions that partner requires.

One Endpoint, a Different Security Posture for Every Partner

On the old server, PGP was the server's feature. On Files.com, it became one option among several, applied partner by partner as each vendor's policy demands.

When one EDI vendor mandated encrypted exchange, HRI turned it on through Files.com's GPG support, and files that vendor encrypts are decrypted inside the Files.com folder they land in, ready for processing. When another vendor's policy ruled out password access, HRI switched that connection to SSH key authentication. IP whitelists restrict each account to the addresses a partner actually sends from, and per-vendor email notifications tell HRI's team when files arrive. Each mandate was met with configuration on a platform HRI already ran, not with a new project.

Dozens of Groups a Day, and a Fourth-Quarter Surge

With the cutover behind it, HRI moved from an internal server to an intake point it holds in its own name. The exchange has run in production on Files.com since 2016.

• Dozens of vendor groups a day deliver 834 enrollment files through the single SFTP intake, most over their own automation.
• Onboarding the next partner is configuration HRI performs itself: an account, a folder, a key or an IP whitelist, a notification. Steady growth as more groups move to electronic transfer, and the open-enrollment surge every fourth quarter, land on the platform rather than on new infrastructure.
• A vendor's security mandate no longer starts a project, because encryption, key-based access, and IP restrictions are already on the platform waiting to be applied.
• Encrypted exchange has become part of how HRI sells, offered as an option in new growth opportunities.

An Endpoint That Has Not Moved Since 2016

The exchange point sits under HRI's own agreement, and the endpoint its agents, producers, and vendor groups connect to has not moved since 2016.

A partner-facing endpoint is only as stable as the agreement it sits under. By putting partner exchange on Files.com in its own name, HRI made its most partner-facing system independent of any infrastructure it does not run. Today, the address every trading partner connects to is HRI's to keep, whatever changes around it.