Evaluate The Security Software Company Axway On Compliant File Sharing Info
This report examines Axway not as a generic cloud storage vendor (like Box or Dropbox), but as a provider whose core value proposition is secure, audited, policy-driven file movement. 1. Executive Summary Verdict: Axway is an enterprise-grade, highly compliant solution for file sharing, but it is not a user-friendly, ad-hoc collaboration tool . It excels in regulated industries (finance, healthcare, government) where audit trails, encryption in transit/at rest, and non-repudiation are mandatory.
SecureTransport acts as the governed backbone for automated, high-volume exchanges (e.g., bank-to-bank statements). Syncplicity provides the user-facing layer for employees sharing files internally/externally under IT control. 3. Compliance Framework Mapping Axway explicitly maps its features to major regulations—a critical evaluation point. This report examines Axway not as a generic
Its flagship product, Axway SecureTransport , combined with Syncplicity (acquired for edge sync/share), creates a hybrid model—MFT for B2B/governed flows + enterprise file sync and share (EFSS) for internal collaboration. supports FIPS 140-2 validated cryptography.
| Regulation | Requirement | Axway’s Capability | | :--- | :--- | :--- | | | Right to erasure, data portability, breach notification | Syncplicity supports retention policies and user deletion; SecureTransport logs can be exported for DSARs. | | HIPAA | BAA required, access logs, encryption, automatic logout | Axway signs BAAs. Supports AES-256 at rest, TLS 1.3 in transit, and detailed access audit trails. | | PCI DSS | Protect cardholder data, track access | SecureTransport supports PGP encryption for files with PAN data; logging includes who accessed what file when. | | SOX | Change controls, audit trails, separation of duties | Role-based access control (RBAC) in both products; immutable audit logs for file events. | | FedRAMP / IL (Gov) | Controlled unclassified information (CUI) protection | Axway has FedRAMP Moderate authorization for certain deployments; supports FIPS 140-2 validated cryptography. | TLS 1.3 in transit