Files.com is the file exchange layer carriers, brokers, and TPAs run on: enrollment files under vendor mandates, settlement files on bank terms, and multi-year archives with the audit trail built in. 4,000+ organizations trust Files.com.
No pushy sales process
Real companies. Real file flows. Real results.
Insurance runs on files whose terms are set by the other side. The bank dictates the endpoint, encryption, and keys. The carrier dictates the TLS version. The EDI vendor mandates SSH-key-only auth and IP restrictions. The client writes file-level encryption into the contract. Most carriers, brokers, and TPAs meet all of that with an aging on-prem SFTP server one person maintains: patched around client upgrade windows, invisible to auditors, and sitting in the blast radius of the next acquisition.
On Files.com, every counterparty mandate becomes a setting: a scoped credential, a jailed folder, and an IP allow-list per partner; PGP keys managed in the platform; a full audit trail that answers who took which file and when; and an endpoint under your own domain that survives the datacenter exit, the Azure migration, and the next acquisition. In an M&A-heavy industry, the endpoint held under your own agreement is the one that can’t leave in a divestiture.
Carriers, brokers, TPAs, and insurtech each run a different exchange. These are the ones Files.com carries in production every day.
834 enrollment files arrive from employers, agents, and EDI vendor groups, each with its own GPG keys, SSH-key mandates, and IP restrictions. Files.com meets every mandate as per-partner configuration instead of projects. Q4 open enrollment stops being the season the server falls over.
Settlement files a bank collects from its own endpoint, claims reports pushed to each carrier’s SFTP server, reviewed files delivered to a TPA’s folder: Remote Server connections deliver on whatever terms the other side set.
PGP decryption on arrival is a folder setting with managed keys. The jump host, the receive server, and the decrypt box collapse into configuration, and the keys stop living with a person.
Call recordings under 7-to-10-year retention, claims import files under examination schedules: per-folder retention enforces each clock, and mounts put a governed, audited access layer over archives that must never move.
Child sites and branded domains keep divisions, subsidiaries, and legally separate affiliates apart: the boundaries that show up in state examination reports, encoded in the platform instead of in tribal knowledge.
Policyholders, brokerages, and warranty customers send documents through branded Inboxes and share links. There are no credentials to issue, no PII rides in email, and every submission lands attributed in the right folder.
Files.com moves files between the systems insurance already depends on: policy and claims platforms over their file drops, Workday and payroll providers, Five9 call archives, SAP on the carrier side, and SharePoint where the documents live. Identity comes from Microsoft Entra ID or Okta with SCIM, logs stream to your SIEM, and storage mounts in place (Amazon S3 or Azure Blob), so adopting Files.com re-platforms nothing.
The SFTP server, the decrypt box, the relay scripts, and the consumer file-sharing workarounds — replaced by one governed platform.
Dedicated, fully managed SFTP, FTPS, and FTP endpoints, with every protocol your partners already use. No servers to patch and no DMZ to maintain.Replaces IBM Sterling, GoAnywhere, MOVEit, Axway, AWS Transfer Family
See Cloud SFTP ServerBranded portals, secure share links, and request inboxes, plus co-editing for Office documents. Partners and customers get access with no account and nothing to install.Replaces Box, Dropbox, ShareFile, Egnyte
See CollaborationMove files up to 5 TB at full speed over any distance, with chunked, resumable transfers on standard protocols and custom UDP acceleration in the Agent.Replaces IBM Aspera, Signiant
See Fast TransfersTrigger on a file arriving, a schedule, or an event, then route, convert, and notify, with retries and alerts built in. The reliable replacement for the scripts and cron jobs nobody wants to own.Replaces fragile custom scripts and cron jobs
See AutomationsReshape files inline as they move: convert formats and pull fields out of EDI, HL7, XML, JSON, and CSV, so downstream systems get exactly what they expect.Replaces hand-built parsing and conversion scripts
See Transform & ExtractNative apps for Windows, macOS, iOS, and Android mount your cloud storage as a local drive, so you can retire aging file servers and NAS without changing how people work.Replaces NetApp, Nasuni, aging NAS, Windows file servers
See File Server ReplacementEvery capability runs on one platform — SOC 2 Type II certified, HIPAA BAA available, with a complete audit trail on every action.
SOC 2 Type II audited, PCI attested, HIPAA BAA included with Files.com Enterprise, and 15+ years in operation — the posture your clients’ vendor audits are looking for.
Independently audited, every year.
Certified under FedRAMP 20x at Class A, with Class B in progress.
BAA and DPA available, with EU and regional data residency.
AES-256 at rest, TLS 1.2 and 1.3 in transit.
SAML SSO, SCIM provisioning, MFA, and granular role-based access.
Every action logged immutably and streamed to your SIEM.
No Level 1 runaround, no script, no callback queue. When something breaks, you reach a seasoned file transfer expert who can actually fix it.
Talk to file transfer experts who understand how you work.
A dedicated Customer Engineer and a step-by-step plan — most teams are live within five business days.
Enterprise Support is a real relationship, not a faster queue. Enterprise Support customers run Files.com around the clock as critical infrastructure, and we’re there when something can’t wait until Monday morning.
See Enterprise Support“We use Files.com for automated SFTP transfers with our trading partners. The automation lets us handle every partner's quirks without writing custom code.”
“The biggest challenge that Files.com helps us solve is keeping our file transfers secure. We rely most on the ability to keep our data encrypted while it’s stored at rest as well as in transmitting the data.”
“A security-first approach, granular permission model, and detailed audit logging. Easy to enforce least-privilege access across multiple sites.”
What insurance IT teams ask most when evaluating Files.com.
Yes. Carriers and TPAs run ANSI X12 834 enrollment intake on Files.com at scale: one dental-and-vision carrier processes enrollment for ~250,000 members from ~50 vendor groups a day, with each partner’s GPG, SSH-key, and IP mandates met as configuration. Files TransformScript transforms X12 EDI inside the platform when the file needs reshaping on arrival.
Yes. Files.com offers a pre-written, pre-approved HIPAA Business Associate Agreement, executed with any customer on Files.com Enterprise. TPAs, benefits administrators, and health-plan-facing insurers run HIPAA-regulated exchange on Files.com in production.
Yes. Files.com takes over the existing hostname and SFTP host key, so an entire HIPAA-regulated partner estate moves without a single partner reconfiguring anything. A custom domain makes the endpoint yours permanently, so it outlives whatever infrastructure sits behind it.
Files.com provides its PCI Attestation of Compliance and responsibility matrix for your own assessments, and the platform enforces the controls assessors look for: authenticated, least-privilege access to stored data, MFA, and a complete audit log, including over archives that stay exactly where they are, with nothing moved to prove control.
Yes. Child sites give each division its own branded exchange with corporate retaining oversight from the parent. One Fortune 500 specialty insurer runs 17 deliberately dissimilar divisions this way, and acquisitive brokerages give each acquired subsidiary its own branded domain on the shared platform.
Carriers, brokers, and TPAs run mission-critical file exchange on Files.com. Talk to our team or validate the technology on a 7-day free trial.
No pushy sales process