Diplomat MFT by Coviant Software

Managed File Transfer (MFT) is software that securely automates the movement of business files between people, applications, cloud services, and trading partners. Every payroll run, healthcare record, EDI order, banking report, insurance claim, or customer export ultimately becomes a file that has to move from one system to another, and as organizations grow, those transfers become too important to trust to manual uploads, scheduled scripts, or an aging FTP server, because a single missed file can mean a missed payroll, a stalled order, or a compliance breach.

Think of MFT as the difference between an ordinary mailbox and a tracked courier service: both move documents, but only one records every collection, delivery, and signature.

Diplomat MFT is Coviant Software's enterprise MFT platform. It automates secure transfers over SFTP, FTPS, HTTPS, and AS2, with encryption, scheduling, notifications, and reporting managed from one interface. In practice that means transfers stop depending on one person who knows where the scripts live, and start being processes the whole team can see, run, and prove. Learn more about managed file transfer or explore Diplomat MFT in depth.

Coviant Software is a specialist file transfer software company and the maker of Diplomat MFT. The company has focused on one problem for nearly twenty years: moving sensitive business files securely, reliably, and automatically.

That focus shows in who relies on it. Hospitals and healthcare organizations, banks and financial services firms, retailers, manufacturers, law firms, and government agencies trust Diplomat MFT with millions of file transfers every day, and verified users rate it highly on independent review platforms such as G2 and SourceForge.

Because file transfer is the whole business rather than one module in a sprawling suite, support conversations happen with people who know the product deeply. Explore Diplomat MFT to see the platform itself.

Four secure protocols dominate business file transfer because different industries standardized at different times for different needs: banks and healthcare providers settled on SFTP (encrypted transfer over SSH), organizations with existing FTP infrastructure adopted FTPS (FTP wrapped in SSL/TLS certificates), cloud applications and APIs exchange files over HTTPS, and retail, logistics, and manufacturing supply chains run EDI over AS2. Your trading partners chose their protocol years ago, which means you rarely get to choose yours; you need to speak all of them.

Diplomat MFT supports all four from one platform, alongside native connections to Amazon S3, Azure Blob Storage, Google Cloud Storage, SharePoint, OneDrive, Zoho WorkDrive, and Windows file shares, and can host its own enterprise SFTP server. Partners without specialist software can exchange files in the browser through the Web Transfer Portal, because occasional senders should not need an IT project to deliver a file. The practical outcome is one platform, one audit trail, and no per-protocol tooling to maintain.

Diplomat MFT builds OpenPGP encryption and decryption directly into transfer workflows, so files are protected automatically without manual steps or command-line scripts.

PGP (Pretty Good Privacy) protects files with a pair of cryptographic keys: a public key that encrypts and a private key that decrypts. It works like a letterbox with a lock: anyone with your public key can drop a file in, but only you can open it. Financial, healthcare, and payroll files still demand PGP even over encrypted connections, because the connection only protects data in motion; PGP keeps the file itself protected wherever it lands.

The weakness in most PGP setups is never the cryptography; it is people encrypting manually, mishandling keys, or skipping the step under deadline pressure. Diplomat MFT stores keys centrally, applies encryption on every scheduled run, and logs each encrypt and decrypt event. Why this matters: staff no longer have to remember encryption steps, IT stops troubleshooting failed manual encrypts, and auditors get a complete record of every protected exchange. Learn how to automate PGP and secure file transfer or start with how PGP keys work.

Yes, though no software makes an organization compliant on its own. Compliance is really an evidence problem: most regulations do not simply ask whether encryption exists, they ask whether you can demonstrate that sensitive information was handled appropriately every time.

That is what frameworks such as HIPAA, HITECH, GDPR, PCI DSS, GLBA, CMMC, and DORA have in common. Auditors want to see who transferred a file, when, where it went, whether it was encrypted, and whether it succeeded. Diplomat MFT records all of this automatically in an audit trail, a tamper-resistant history of every transfer, which replaces the undocumented manual processes that fail audits.

Standardizing transfers on one platform also reduces dependency on individual employees and removes the most common cause of data incidents, human error. The practical outcome is that audits become less disruptive, because the evidence already exists as a report rather than a reconstruction.

No. Trading partners connect using whichever secure method suits their capability, with nothing forced on them.

Larger partners typically already run SFTP, FTPS, or AS2 software and connect directly. But browser upload matters because many suppliers only exchange files occasionally and cannot justify installing dedicated software or involving an IT department, and those partners are exactly where secure processes usually break down, with files arriving by email instead. For them, the Web Transfer Portal provides a secure browser-based way to send and receive files with no installation, while every exchange is still encrypted and logged like any other transfer.

The outcome is one platform covering both ends of the spectrum, deep technical integrations and simple browser access, so no partner relationship forces a security compromise. Diplomat MFT can also host your own enterprise SFTP server endpoint for partners who want a standing connection.

Diplomat MFT pricing is published openly, so you can know the price before you ever talk to sales. Licensing comes in three editions, Standard, Professional, and Enterprise, sized by the capacity and capabilities your environment needs.

Transparent pricing matters in this category because enterprise file transfer vendors often quote opaque, negotiated figures with add-on modules that surface late in the process. Published editions let you budget accurately, compare fairly, and involve your leadership early, and multi-year terms lock in today's prices for the length of the term.

See current pricing and what each edition includes on the Diplomat MFT pricing page.

Diplomat MFT runs on Windows and Linux servers, deployed on-premises, in the cloud, or in a hybrid of the two. You choose where it lives, and the platform behaves the same everywhere.

Deployment flexibility matters because file transfer sits close to sensitive data, and many organizations have data residency, sovereignty, or security requirements that rule out being forced onto someone else's cloud. Running Diplomat MFT inside your own environment keeps your files, encryption keys, and audit records under your control, with every transfer PGP encrypted in transit and at rest. Explore Diplomat MFT for deployment details.

Free tools like FileZilla and WinSCP are file transfer clients: software built for a person to move files by hand. Diplomat MFT is managed file transfer: a platform built to move files automatically, on schedules and events, with no one at the keyboard.

The difference shows up the moment transfers become business-critical. A desktop client has no unattended scheduling, no automatic retries, no PGP policy enforcement, no alerting when something fails, and no audit trail an assessor would accept. The scripts teams write to bridge those gaps, batch files, PowerShell, and cron jobs wrapped around a client, become exactly the fragile, undocumented automation that managed file transfer exists to replace.

Free clients remain the right tool for occasional manual transfers. When files have to move reliably every day and you have to prove it, that is MFT's job. Start with what managed file transfer is.

Both. Diplomat MFT is licensed in three editions, Standard, Professional, and Enterprise, so a small IT team automating its first secure transfers and a global organization running thousands of daily workflows use the same core platform at different capacities.

Starting small is deliberate: many customers begin with a handful of workflows and grow into higher editions as partner networks and compliance requirements expand, without replatforming. Because the pricing is published, scaling up is a budgeting exercise rather than a renegotiation.

The 15-day free trial requires no credit card, so the practical first step for any size of team is the same: test it against your real workflows. See editions and pricing.