Does Files.com sign a HIPAA Business Associate Agreement?

Yes. Files.com signs a HIPAA BAA with every customer that handles PHI — included on every plan, not an add-on or a higher tier. See the Compliance Center for the full attestation set.

Is Files.com HIPAA compliant?

Files.com supports HIPAA-regulated workloads with the BAA, AES-256 encryption in transit and at rest, a tamper-proof audit trail on every action retained 7+ years, policy-driven retention, and SOC 2 Type II auditing. Healthcare organizations from Banner Health to community clinics run PHI-bearing exchange on Files.com in production.

Can Files.com transform HL7 and X12 healthcare EDI?

Yes. Files.com transforms HL7 messages and X12 EDI via Files TransformScript — parsing, conversion, and routing happen inside the platform, in addition to the secure transport. Paired with File Extraction, inbound eligibility, claims, and remittance files route by their content the moment they land.

Is Files.com 21 CFR Part 11 compliant?

Files.com provides the audit-trail, access-control, and retention primitives that clinical research organizations assemble into their own validated systems — and it is used in production by research organizations whose validated systems satisfy 21 CFR Part 11. The Part 11 compliance posture lives at the application layer the customer validates, so Files.com does not claim Part 11 compliance as a binary. Contact Sales to walk through a GxP or Part 11 evaluation.

Can PHI files stay on our own storage?

Yes. The Files.com Agent runs inside your network and makes only outbound connections — no inbound firewall rule, no new machine in the DMZ — and Remote Server Mounts front the S3, Azure, or on-prem storage you already own. Partners see a modern managed endpoint; the bytes land on your storage and stay there.

Does Files.com support 340B pharmacy file workflows?

Yes. 340B administrators and pharmacy services companies run eligibility, split-billing, and claims exchange on Files.com — Pillr Health moved its 340B workflows off Axway one workflow at a time, with PGP decryption becoming a folder setting and thousands of X12 EDI files a week flowing through the platform.

Can Files.com replace our legacy MFT appliance in healthcare?

Yes — Axway, MOVEit, and GoAnywhere replacements are a standing motion in healthcare. ITx Companies replaced GoAnywhere and automated daily PHI exchange with ~35 hospitals; Pillr Health retired Axway workflow by workflow. Migrations run in parallel with the incumbent, one partner or workflow at a time, and with you. Bring a renewal quote: Files.com will not be undersold against legacy MFT.

HIPAA Compliant File Transfer, With The BAA Included

Files.com is the file orchestration platform healthcare runs on — payer claims, eligibility intake, clinical results, and terabyte research datasets, exchanged with partners under a HIPAA BAA that comes with every plan. 4,000+ organizations trust Files.com, including Banner Health, Natera, and Fred Hutchinson Cancer Center.

Contact Sales Start My Free Trial

No pushy sales process

Every protocol included

SOC 2 Type II audited

Live in minutes

4,000 organizations rely on Files.com every day

Real companies. Real file flows. Real results.

Delivery You Can Prove, Not Just Delivery

Healthcare file exchange has a higher bar than moving the bytes: prove what arrived, when, and from whom. A radiology result that nobody picked up is a patient-safety problem. A payer file that silently failed to decrypt is a week of manual reprocessing. A delivery dispute with a counterparty is an audit exposure until someone produces the record.

Most healthcare teams run that exchange on a mix of an aging MFT appliance, a separate interface engine for HL7 and EDI, one-off SFTP scripts, and email — held together by the same people who are supposed to be building new things.

Files.com replaces the stack with one platform where the record is built in: a HIPAA BAA on every plan, a tamper-proof audit trail of every action, PGP decryption as a folder setting instead of a failure mode, HL7 and X12 transformation via TransformScript, and the outbound-only Agent for the firewall-locked networks healthcare actually runs.

The Workflows Healthcare Actually Runs

Pharmacy, payer, provider, research, and diagnostics teams each run a different exchange. These are the ones Files.com carries in production every day.

Claims And Remittances Route Themselves

837 claims go out, 835 remittances come back, and content-aware routing sends each file type to the right clearinghouse or downstream system — so nobody on the EDI team sorts an inbox by hand.

Eligibility Intake That Onboards Itself

A folder, a credential, and an IP allow-list per employer group, payer, or EDI vendor — onboarding a new partner is configuration, not an infrastructure build, even when the vendor mandates GPG and SSH-key-only access.

Results Delivery With A Receipt

The audit trail records every pickup, so a delivery dispute is a lookup. Banner Imaging runs radiology results on a convention where the practice deletes the file on pickup — an empty folder is proof the physician got the result.

Terabyte Research Data, Delivered

500 GB genomic files and multi-terabyte sequencing runs move at full speed into whatever cloud each partner runs — lab scientists drag a folder, and nobody has to become an engineer to deliver a dataset.

HL7 And X12, Transformed On Arrival

Files TransformScript transforms HL7 messages and X12 EDI inside the platform, at the moment the file lands — so the interface-engine-plus-MFT two-vendor pattern collapses into one.

PHI Off Email, Fax, And Consumer Sync

Inboxes and expiring share links give referring providers, employer HR contacts, and pharmacy staff a governed path that works with nothing but a browser — because a large share of healthcare counterparties have no IT department at all.

Healthcare Runs On Files.com

Works With What Healthcare Already Runs

Files.com moves files in and out of the systems healthcare already depends on: interface engines like Mirth, EHR-adjacent exchange with MEDITECH and eClinicalWorks environments, clearinghouses like Change Healthcare, Veeva Vault for regulated content, and Workday and Oracle on the back office. Identity comes from Okta or Microsoft Entra ID with SCIM provisioning, and storage mounts in place — Amazon S3, Azure Blob, Google Cloud Storage, or the on-prem NAS behind your firewall — so the platform is the exchange layer, and your data stays where you put it.

One Platform To Replace Your Whole File Stack

The MFT appliance, the interface engine, the scripts, and the email workarounds — replaced by one platform with the compliance record built in.

Cloud SFTP, FTP & MFT Server

Dedicated, fully managed SFTP, FTP, and FTPS endpoints, with every protocol your partners already use. No servers to patch and no DMZ to maintain.Replaces IBM Sterling, GoAnywhere, MOVEit, Axway, AWS Transfer Family

See Cloud SFTP Server

File Sharing & Collaboration

Branded portals, secure share links, and request inboxes, plus co-editing for Office documents. Partners and customers get access with no account and nothing to install.Replaces Box, Dropbox, ShareFile, Egnyte

See Collaboration

Fast File Transfer & Acceleration

Move files up to 5 TB at full speed over any distance, with chunked, resumable transfers on standard protocols and custom UDP acceleration in the Agent.Replaces IBM Aspera, Signiant

See Fast Transfers

Automation & Workflows

Trigger on a file arriving, a schedule, or an event, then route, convert, and notify, with retries and alerts built in. The reliable replacement for the scripts and cron jobs nobody wants to own.Replaces fragile custom scripts and cron jobs

See Automations

Data Transformation & Format Conversion

Reshape files inline as they move: convert formats and pull fields out of EDI, HL7, XML, JSON, and CSV, so downstream systems get exactly what they expect.Replaces hand-built parsing and conversion scripts

See Transform & Extract

Desktop Drive & File Server Replacement

Native apps for Windows, macOS, iOS, and Android mount your cloud storage as a local drive, so you can retire aging file servers and NAS without changing how people work.Replaces NetApp, Nasuni, aging NAS, Windows file servers

See File Server Replacement

Every capability runs on one platform — SOC 2 Type II certified, HIPAA BAA available, with a complete audit trail on every action.

Security And Compliance, Built In

SOC 2 Type II audited, HIPAA BAA on every plan, and zero breaches in 15+ years of operation — the posture your vendor security review is looking for.

SOC 2 Type II

Independently audited, every year.

HIPAA & GDPR

BAA and DPA available, with EU and regional data residency.

Encrypted End To End

AES-256 at rest, TLS 1.2 and 1.3 in transit.

SSO, SCIM & MFA

SAML SSO, SCIM provisioning, MFA, and granular role-based access.

Complete Audit Trail

Every action logged immutably and streamed to your SIEM.

Annual Penetration Testing

Third-party tests across the whole platform.

See Our Compliance Center

Every Support Request Reaches A Senior Engineer

No Level 1 runaround, no script, no callback queue. When something breaks, you reach a seasoned file transfer expert who can actually fix it.

All-Engineer Support Desk

Talk to file transfer experts who understand how you work.

Replies in under an hour
Talk straight to engineers
We watch for problems
We own the escalation

See How Support Works

Onboarding Services

A dedicated Onboarding Architect and a step-by-step plan — most teams are live within five business days.

Migration planning
Help on go-live day
Workflow tuning
Training for your team

See How Onboarding Works

Enterprise Support

Enterprise Support is a real relationship, not a faster queue. Enterprise Support customers run Files.com around the clock as critical infrastructure, and we’re there when something can’t wait until Monday morning.

See Enterprise Support

“We use Files.com for automated SFTP transfers with our trading partners. The automation lets us handle every partner's quirks without writing custom code.”

Phillip Webb

Director of PPO Analysis and EDI Services, Health Payer Consortium

“Files.com's strengths are simplicity, ease of use, and the cloud connectors. We don't have to invent custom infrastructure for every partner.”

Tommy Chapley

Senior Software Engineer, Equifax

“Files.com is robust and scales to a large enterprise. We get multiple files per minute, per second — and we're a 24/7 organization, so everything has to always be up.”

Nelson Miranda

Sr. Systems Engineer, Spirit Airlines

Read the story →

Healthcare File Transfer FAQ

What healthcare IT teams ask most when evaluating Files.com.

Run Your Healthcare File Exchange On Files.com

4,000+ organizations run mission-critical file transfer on Files.com. Talk to our team or validate the technology on a free trial.