HIPAA Compliant File Transfer, With The BAA Included

Yes. Files.com signs a pre-written, pre-approved HIPAA BAA with any customer on Files.com Enterprise, included in the base quote rather than sold as an add-on. See the Compliance Center for the full attestation set.

Files.com supports HIPAA-regulated workloads with the BAA, AES-256 encryption in transit and at rest, a tamper-proof audit trail on every action retained 7+ years, policy-driven retention, and SOC 2 Type II auditing. Healthcare organizations from multi-state health systems to community clinics run PHI-bearing exchange on Files.com in production.

Yes. Retention on Files.com is a folder-level policy setting: files persist for HIPAA's six-year requirement, or longer where state rules extend it, without scripts or manual cleanup. The audit log is retained for 7+ years in tamper-proof WORM format, which covers the recordkeeping side of a HIPAA program.

Yes. Files.com transforms HL7 messages and X12 EDI via Files TransformScript. Parsing, conversion, and routing happen inside the platform, in addition to the secure transport. Paired with File Extraction, inbound eligibility, claims, and remittance files route by their content the moment they land.

Files.com provides the audit-trail, access-control, and retention primitives that clinical research organizations assemble into their own validated systems — and it is used in production by research organizations whose validated systems satisfy 21 CFR Part 11. The Part 11 compliance posture lives at the application layer the customer validates, so Files.com does not claim Part 11 compliance as a binary. Contact Sales to walk through a GxP or Part 11 evaluation.

Yes. The Files.com Agent runs inside your network and makes only outbound connections: no inbound firewall rule, no new machine in the DMZ. Remote Server Mounts front the S3, Azure, or on-prem storage you already own. Partners see a modern managed endpoint. The bytes land on your storage and stay there.

Yes. 340B administrators and pharmacy services companies run eligibility, split-billing, and claims exchange on Files.com. One pharmacy services company moved its 340B workflows off Axway one workflow at a time, with PGP decryption becoming a folder setting and thousands of X12 EDI files a week flowing through the platform.

Yes. Axway, MOVEit, and GoAnywhere replacements are a standing motion in healthcare. Migrations run in parallel with the incumbent, one partner or workflow at a time, and Files.com engineers run the migration with you. Bring a renewal quote: Files.com will not be undersold against legacy MFT.

Most teams are live within five business days. Files.com Enterprise includes full onboarding: Customer Engineering builds the migration plan, then runs partner cutover and workflow tuning with you until every feed is flowing.

Files.com hosts the HIPAA-covered endpoint under a signed BAA. Each plan or partner gets its own SFTP account and folder on your domain, files decrypt on arrival if they are PGP-encrypted, and automations hand them to the system that processes them. There is no server to patch, and every transfer is in the audit log.

Send a Files.com share link with a password, a bound recipient and an expiration date, from a site covered by the BAA. The recipient opens it in a browser with no account, the download is logged, and the link stops working on the date you set, which is the recallability email and fax never had.

Run each study as its own folder tree, or as its own child site with its own administrators, on Files.com. Sites, CROs and labs get accounts scoped to their study, single sign-on and SCIM keep the roster current, and the audit log records every access per study for the sponsor’s monitors.