Secure Data Transfers via SFTP

Secure data transfer from data origin to org.manager application server can also be achieved via SFTP.

The SFTP service is accessed via a separate URL over a non-standard port.

For the authentication, customers are required to provide a public RSA key, 4096-bits in size.

Continuous protection against DDoS attacks.

Symmetric AES 256 encryption on the org.manager server disk is used to protect the folders storing the input data files and the output.

Once the data is transferred, org.converter can be scheduled to process the input files and produce a new output.

• By default, input files are only retained while in use, and will get overwritten as soon as a new set of files is sent.

• Storage of files at rest is not mandatory.

• The retention of output files is 90 days by default. This value can be customised.

In addition to the encryption in transit granted by the transfer protocols (TLS1.2 / TLS1.3), the data files themselves can be encrypted using PGP.

If PGP is enabled, Navigo will provide an asymmetric public key for the files to be encrypted before transferring them across.

This key can be 1024, 2048, 3072 or 4096 bits in size.