Briefkasten Systeme
Managed file transfer with a retention policy you choose.
See plans
Security in short
Transport
TLS 1.2 or above, with modern cipher suites only. HSTS is set with a long max-age and preloading is enabled. Plain HTTP exists only to redirect.
Encryption at rest
Objects are encrypted with per-tenant keys. On request, key material is held in a customer-controlled key store so that we cannot decrypt an object without...
Access control
Links are unguessable tokens, not sequential identifiers. A token grants exactly one object, carries its own expiry and download counter, and can be revoked...
Full security notes
How it works
Recipient verification
Optional one-time code to the recipient address before the download starts, so a forwarded link alone is not enough.
Audit trail
Upload, link creation, each download attempt with its result, and expiry. Exportable for the full retention period.
No account for recipients
The receiving side needs nothing installed and no account. That is the whole reason this category of product exists.
Resumable uploads
Chunked uploads survive a dropped connection, which matters at the file sizes this service exists for.
Expiring links
Every link carries an expiry and a download limit. Both default to something conservative and can be shortened, not extended, after the fact.
Background
We run a managed file transfer service for organisations that regularly need to send material no mail gateway will accept. A sender uploads, the recipient gets a link, the link expires. Every step is recorded, which is usually why the service was procured in the first place.