Award-winning MFT Software - Diplomat MFT
Award-winning MFT Software - Diplomat MFT

For Organizations · PGP Encryption Built Into Diplomat MFT

Modern File Transfer for Modern Business Operations

15-day free trial · No credit card · Talk to an MFT engineer, not a sales script
Diplomat MFT at a glance
Secure File Transfer, Automated
On-premises · cloud · hybrid · every transfer PGP encrypted, in transit and at rest
20+ years breach-free
Banks, hospitals & agencies
Automatic PGP enforcement
New in v9.5, zero user error
No-code automation
Retire fragile transfer scripts
Multi-protocol support
SFTP, FTPS, HTTPS, AS2
Compliance-ready
HIPAA, GDPR, GLBA, PCI-DSS
Licensed to organizations
(not for personal file sharing)
Healthcare Finance Government HR & Payroll Accounting

Send Files to Anywhere From Anywhere

Our customers rely on us to integrate and work with their existing healthcare, accounting, HR, financial, and other business software solutions for their secure file transfer needs. Book a personalized demo or get a quote from one of our MFT experts today!

Securing file transfers for

PGP Web
Interface

Threat Intelligence & IP Protection

SFTP Connections Reporting

PGP Enforcement Rules

Enhanced Integration & Automation

Diplomat MFT

Managed File Transfer Software for Secure B2B and Hybrid Data Exchange

Diplomat MFT helps organizations eliminate manual processes, fragmented tools, and custom scripts by centralizing secure file transfers across cloud, on-premises, and trading partner environments. Automate SFTP, FTPS, HTTPS, AS2, and PGP-encrypted workflows from a single platform with complete visibility and control.

Diagram: your organization's on-premises systems and cloud storage connect through Diplomat MFT, which exchanges files in both directions with trading partners including a hospital, a bank and a government agency. Diplomat MFT supports multiple protocols and every transfer is PGP encrypted, in transit and at rest.Click to enlarge
Single Platform for Hybrid Data Exchange
Connect applications, databases, cloud storage, and business systems across on-premises, cloud, and hybrid environments.
Secure B2B File Transfer Automation
Automate and monitor secure file exchanges with customers, suppliers, banks, healthcare providers, and government agencies.
Visibility, Compliance, and Control
Centralized monitoring, audit trails, and compliance reporting for HIPAA, GDPR, PCI DSS, GLBA, DORA, and more.
Connectivity
Connects to the platforms you already run
Push and pull files across cloud storage, SFTP endpoints, and network shares, all from one console.
Amazon S3 connector
Amazon S3
Azure Blob Storage connector
Azure Blob
Google Cloud Storage connector
Google Cloud
Microsoft SharePoint connector
SharePoint
Microsoft OneDrive connector
OneDrive
Zoho WorkDrive connector
Zoho WorkDrive
Protocols
SFTP · FTPS · HTTPS · AS2
Runs on
Windows · Linux

Eliminate File Transfer Complexity Across Hybrid Environments

01
Reduce Integration Friction
Connect AWS, Azure, Google Cloud, SharePoint and more without complex custom development.
02
Eliminate Security Gaps
Protect sensitive data with built-in quantum-safe encryption, without relying on third-party security tools.
03
Replace Custom Scripts
Automate secure file transfers across your B2B supply chain, without scripts or third-party tools.
04
Connect Disparate Systems
Exchange files between applications, cloud platforms, and trading partners using SFTP, FTPS, HTTPS, AS2 across a single platform.
05
Stop Compliance Blind Spots
Automate audit trails and reporting to support GLBA, GDPR, DORA, PCI DSS, and more.
06
Secure PHI Exchange at Scale
Protect sensitive healthcare data across providers, payers, laboratories, and business associates while supporting HIPAA and HITECH requirements.

FILE TRANSFER AUTOMATION

Multi-Step Automation Without Custom Scripting

Build powerful, event-driven workflows using Diplomat MFT’s no-code workflow builder. Chain file arrival, decryption, validation, transformation, and delivery into a single reliable automated pipeline.

9

Event-driven triggers: Start workflows on file arrival, schedule, or external API event

9

Multi-protocol delivery: Route files via SFTP, FTPS, HTTPS, AS2, S3, Azure Blob and more

9

Inline PGP handling: Decrypt, process, re-encrypt and forward in a single workflow

9

Retry & error handling: Automatic retries, failure alerts, and configurable fallback routing

Edge Gateway & SFTP Server

Secure Perimeter. Accept External Transfers Without Exposing Your Network.

Deploy Diplomat MFT’s Edge Gateway to accept incoming transfers in your DMZ. The built-in SFTP Server gives trading partners a single, secure connection point across all environments.

9

DMZ deployment: Accept external transfers without exposing internal systems

9

Built-in SFTP server: Host your own endpoint, no third-party server required

9

Hybrid-ready: Bridge on-premises, private cloud, and public cloud environments

9

Zero Trust architecture: Every connection authenticated and authorised before network traversal

Unified Security

Enterprise-grade security built into every transfer. Web Transfer Client, Threat Intelligence, and IP Access Controls work together to protect your entire data supply chain without heavyweight infrastructure.

Security
PGP Encryption Enforcement
Mandatory encryption policies applied at the transfer level with no exceptions, no gaps, no workarounds.
Policy-enforced · Zero exceptions
Protocols
SFTP · FTPS · AS2 · HTTPS
Enterprise-grade secure protocols for every internal and external use case that are built in, not bolted on.
Native · No third-party dependencies
Track Record
Zero Breaches (since 2004)
Proven enterprise security record across healthcare, finance and government with two decades of unbroken trust.
Healthcare · Finance · Government

Web Transfer PORTAL

Browser-Based Secure File Exchange (No Client Install Required)

Empower internal teams and external trading partners with a secure, browser-based file transfer portal. Because PGP enforcement and audit visibility are built in from the start, there is no software to install and no added complexity.

9

No agent install: Partners connect securely via browser using existing SFTP/FTPS credentials

9

Branded portal: Customisable interface for a professional B2B partner experience

9

PGP enforcement: Automatically apply encryption policy to all browser-based uploads and downloads

9

Full audit trail: Every session, file, and action logged and timestamped for compliance

How partners send you files securely, in five steps

No SFTP client. No VPN. No training. Just a browser, and automatic PGP encryption the moment a file lands.

Partner's browser
Open portal
Partners visit your branded portal URL in any browser. Nothing to install, no VPN to configure.
No software installation required

Threat Intelligence

Proactive Threat Detection at the Transfer Layer

Diplomat MFT automatically blocks connections from known malicious IP ranges before any data exchange occurs. Live threat feeds update continuously ensuring your environment stays protected without manual intervention.

9

Real-time threat feeds: Live IP reputation data blocks risky connections at the transfer layer automatically

9

Partner security scoring: Assess and score SFTP partner posture across your ecosystem

9

Zero manual overhead: Threat database updates run silently in the background

9

Audit-ready logs: Every blocked attempt recorded with full timestamp and context

Threat Intelligence

IP Access Rules

Granular Network Access Control. Zero Trust at the Transfer Layer.

Define precise allow/deny rules at the IP, CIDR range, or hostname level. Enforce Zero Trust principles at the transfer perimeter so only permitted sources can initiate or receive transfers.

9

Allow/deny lists: Whitelist partner IPs and block all other inbound connections

9

CIDR range support: Apply policies to full network ranges with a single rule entry

9

Per-user policies: Apply different access rules by user account or group

9

Full visibility: All allowed and blocked attempts logged in real time for audit

IP Access Rules
Encryption Enforcement
PGP Encryption

Automatic PGP Encryption, Built Into Every Workflow

Diplomat MFT enforces OpenPGP encryption automatically, in transit and at rest, with no manual key handling and no opportunity for user error. Watch how policy-enforced PGP works across workflows, browser uploads, and key management.

Compliance

Compliance Made Simple

The technical safeguards to satisfy HIPAA, PCI DSS, GDPR, GLBA, DORA and more. One-click reporting, automated audit trails, and visual data flow documentation remove the compliance burden from your team.

Connection Map & Visual Data Flow

Real-time visual map of every connection and data flow across your MFT environment. Understand who is sending what, where, and when, without digging through log files.

  • Visual topology of all active trading partner connections
  • Drill into any node for full transfer history
  • One-click export for audit evidence packages
SFTP Audit Reports & Report Manager

Automatically generate detailed SFTP audit reports documenting every file transfer in your supply chain. Pre-formatted, timestamped evidence ready for auditors, in one click.

  • Per-partner transfer history with full metadata
  • Pre-formatted for HIPAA and PCI DSS audit packages
  • Scheduled reports delivered automatically to stakeholders
PGP Encryption Enforcement

Automatically apply PGP encryption policy to every file transfer. No manual key handling, no client software required, policy-enforced encryption from day one.

  • Automatic PGP encryption on all browser-based uploads
  • Enforce encryption rules without user intervention
  • Full key management and audit trail built in
Dry Run: Pre-Flight Transfer Validation

Validate every transfer job before it runs in production. Dry Run simulates the full execution path, catching misconfigurations and connection failures before data moves.

  • Simulate transfer jobs without moving live files
  • Identify connectivity and permission errors early
  • Confidence-check automations before go-live
Supported Frameworks
HIPAA PCI DSS GDPR GLBA DORA SOC 2
G2 · Summer 2026
Don't take our word for it
Diplomat MFT earns three G2 badges for Summer 2026, rated by verified users.
G2 High Performer, Summer 2026G2 Users Love Us, Summer 2026G2 Highest User Adoption, Summer 2026
Show prices:
Production-Ready

Standard

A complete secure file transfer platform. For IT teams that don’t need enterprise-scale automation.

$ 335 /month

Billed annually $3,999

Auto-PGP encryption on browser uploads

Not available on Standard. Optional add-on with Professional, included in Enterprise. Encrypts every browser upload before it leaves the partner’s machine.

Not available on this plan
  • Edge Gateway Network-edge component that handles inbound transfers safely without exposing internal systems to the public internet.
  • SFTP server
  • Web Transfer Portal Browser-based upload/download interface for ad-hoc transfers by external users — useful for partners who don’t use SFTP. PGP encryption for Web Transfer is available as an add-on on Professional and included on Enterprise.
  • Up to 25 automated workflows Called “transactions” in Diplomat MFT — defined transfer jobs such as nightly ERP exports, partner SFTP feeds or cloud sync workflows. Each is one transaction regardless of how many files it moves.
  • Up to 5 File Transfer Server accounts Called “transfer server users” in Diplomat MFT — external accounts that authenticate to your SFTP or Web Transfer server. Typically the partners and customers sending files to you.
  • Up to 5 keys per type Cryptographic keys for PGP, SSH and SSL — each type has its own slot count.
ExplainerDiplomat MFT
See what Diplomat MFT does and why IT teams choose it, in one short explainer.
Demo · v9.5Full Product Demo
A long-form walkthrough of automation, encryption, and the Web Transfer Portal in action.
Guided tour · v9.4.1Guided Tour
Sit alongside an MFT engineer for a guided tour of the platform, end to end.

Tools, Calculators & Resources

Validate your investment case, benchmark your current setup, and explore how Diplomat MFT compares, before you pick up the phone.

Business Case
MFT Business Case Builder
Build the numbers-backed case for Diplomat MFT: transfer volumes, compliance load and engineering time, in one page.
View Resource
Calculator
Cybersecurity ROI Calculator
Estimate breach risk exposure and calculate the financial value of enterprise MFT security controls.
View Resource
Calculator
Healthcare IT ROI Calculator
Purpose-built for healthcare organisations evaluating HIPAA-compliant MFT against legacy alternatives.
View Resource
Whitepaper
Your Plan of Action to Ensure File Transfer Security
Using Diplomat MFT as a solution for file transfer security, HIPAA/HITECH, GDPR and PCI/DSS requirements.
View Resource
Comparison
Diplomat MFT vs GoAnywhere
Side-by-side feature, pricing, and security comparison for buyers evaluating alternatives.
View Resource
Comparison
Diplomat MFT vs MOVEit
Feature, TCO, and security architecture comparison for buyers considering MOVEit alternatives.
View Resource
Questions, answered

Diplomat MFT FAQs

Gradually. The most successful migrations replace one workflow at a time rather than everything at once.

Legacy transfer setups are a little like dozens of handwritten instructions taped around a factory: the Windows Scheduled Tasks, PowerShell and batch scripts, and FTP jobs may have worked for years, but nobody remembers who wrote them, whether they are still correct, or what breaks if one disappears. They also share structural weaknesses: passwords stored inside scripts, unencrypted FTP connections, failed transfers nobody notices, and no audit trail when someone asks what happened.

Common migration mistakes worth avoiding: migrating everything simultaneously, leaving the old FTP server running indefinitely "just in case", forgetting scheduled jobs that only run monthly or quarterly, not rotating the credentials that lived in scripts, and not documenting trading partner connections before switching them.

Because Diplomat MFT runs modernized and legacy workflows side by side during transition, partners never notice the cutover, and each migrated workflow immediately gains encryption, retries, alerting, and logging. The outcome is transfers that stop depending on whoever wrote the original scripts.

Yes. Organizations move between MFT platforms regularly, usually because of licensing changes, vendor consolidation, cloud adoption, support quality, or a platform that has grown more complex and expensive than the job requires.

A successful migration preserves business processes, not just software. Teams moving from MOVEit or GoAnywhere typically review their automated workflows, trading partner connections, PGP keys and certificates, scheduling rules, and audit requirements, then map each across. In practice most environments translate cleanly, and the project becomes an opportunity to retire workflows nobody uses and simplify the ones everybody depends on.

How much help you want is your call. Coviant's engineers can run the migration for you, train your team to run it themselves, or stay on hand while you do it your own way. Whichever route you take you are working with the same engineers, because the riskiest part of any migration is the part of the old system nobody documented.

The best MFT platform is not the one with the longest feature list; it is the one that fits your security, operational, and compliance requirements at a cost you can predict. If you are evaluating MOVEit, GoAnywhere, Cerberus FTP, Globalscape EFT, or another enterprise file transfer solution, a structured comparison looks at five areas.

Security: encryption in transit and at rest, PGP key management, modern authentication, and the protocols your partners actually require. Automation: scheduling, event triggers, automatic retries, and alerts that tell you something failed before your partner does. Visibility: audit trails and reporting that answer an auditor's questions in minutes rather than days. Scalability: cloud storage support, hybrid deployment, and room for a growing partner network. Total cost of ownership: look past the license price to add-on modules, per-connector fees, implementation effort, and support quality, because the sticker price is rarely the real price.

Then do what experienced buyers do: check independent review platforms such as G2 and SoftwareReviews, where verified users score vendors on the things demos hide, and validate your shortlist against real workflows in a free trial. The MFT Business Case Builder turns the comparison into numbers your leadership team can review.

Diplomat MFT comes in three editions: Standard, Professional, and Enterprise. All three run the same core platform; what changes is capacity and capability, including how many File Transfer Server accounts and encryption keys you can manage and how many Cloud Storage Connectors are included.

Standard suits teams automating their first secure workflows, Professional adds the capacity most mid-sized environments need, and Enterprise removes the ceilings for large partner networks. Because pricing is published openly, you can map your requirements to an edition before ever talking to sales. See what each edition includes on the pricing page.

The Web Transfer Portal is a browser-based interface for exchanging files with people who do not have SFTP software. Partners visit your branded portal URL, sign in with their existing credentials, and upload or download directly in the browser, with nothing to install and no VPN to configure.

Permissions mirror your SFTP server exactly, so partners see only the folders you have granted, and files are PGP encrypted automatically as they are uploaded, if the feature is enabled. Every exchange is logged in the same audit trail as the rest of your transfers, so browser convenience never means a visibility gap. Explore the Web Transfer Portal in detail.

Diplomat MFT includes its own enterprise SFTP server, so there is no third-party server to license, patch, or maintain. It gives trading partners a single, secure connection point across your environments.

For organizations that need to accept external transfers without exposing internal systems, the Edge Gateway deploys in your DMZ and brokers inbound connections, supporting a Zero Trust posture where every connection is authenticated and authorized before it traverses your network. See the SFTP server page for details.

Diplomat MFT triggers transfers two ways: on a schedule, from simple intervals to precise calendar rules, and on events, such as a file arriving in a monitored location. Event-driven workflows start the moment work exists rather than waiting for the next polling window.

Each workflow chains the steps around the transfer itself, such as encryption or decryption and delivery to multiple destinations, so the whole pipeline runs unattended. The practical outcome is that files move when they should without anyone remembering to run anything.

Failed transfers retry automatically according to rules you set, and alerting notifies your team the moment something needs attention, so you find out before your trading partner does.

Every attempt, success or failure, is recorded in the audit trail with what moved, when, and where it was going. That combination, automatic retries plus proactive alerts plus a complete record, is the difference between managed file transfer and a script that failed silently overnight.

Yes. Diplomat MFT has a 15-day free trial with no credit card required, and the most reliable way to evaluate MFT software is to run your real workflows on it rather than watching a demo.

During the trial you can configure actual partner connections, PGP keys, and schedules, and if you want help along the way you talk to an MFT engineer, not a sales script. Start the free trial.

Start by reviewing how each partner actually connects, because partner connections age quietly. Configurations set up years ago persist unchanged: older protocols still enabled, encryption keys past their intended lifetime, weak cipher settings, and active accounts for partners you stopped trading with.

These weaknesses are nearly impossible to spot while transfer activity is spread across scripts, servers, and individual inboxes, and they matter because auditors and attackers both look for exactly these gaps, and one of them will find yours first. Centralizing transfers on a managed file transfer platform puts every partner connection, security setting, and transfer record in one place, so IT and security teams can strengthen encryption partner by partner, retire outdated protocols, and remove dormant accounts on evidence rather than guesswork. Diplomat MFT provides this visibility as standard, turning partner security reviews from an annual scramble into routine housekeeping.

What is your next step?

No forms, no gatekeeping. Pick the path that matches where you are.