Web Transfer Portal
Browser-Based Secure File Exchange
Internal teams and external trading partners send and receive files through any modern browser. No software install required. Optional automatic PGP encryption. Trusted for 20+ years with zero breaches.
PGP Web
Interface
Threat Intelligence & IP Protection
SFTP Connections Reporting
PGP Enforcement Rules
Enhanced Integration & Automation
How partners send you files securely, in five steps
No SFTP client. No VPN. No training. Just a browser, and automatic PGP encryption the moment a file lands.
Open the portal in any browser
Your partners and customers visit your portal URL. Nothing to install, no VPN to configure, no software to learn. It works on any device with a browser.
Sign in securely
Each user signs in with their own credentials. You control who gets access, and every session is authenticated before a single file moves.
See only the right folders
Users land on exactly the folders you have granted them, and nothing else. Clean, scoped, and simple to navigate.
Upload with drag and drop
Drag a file onto the page or click to browse. That is the entire workflow your partner needs to learn. No technical knowledge required.
Files land automatically encrypted
Here is the part your partner never sees. The plain CSV they uploaded lands as a PGP-encrypted file, secured at rest the moment it arrives. Diplomat MFT handles the encryption automatically, with no action from the sender and nothing for them to configure.
Web Transfer PORTAL
Browser-Based Secure File Exchange (No Client Install Required)
Empower internal teams and external trading partners with a secure, browser-based file transfer portal. Because PGP enforcement and audit visibility are built in from the start, there is no software to install and no added complexity.
SEE IT IN THE BROWSER
The clean, browser-based partner experience.
Trusted by File Transfer Operators Worldwide
Diplomat MFT helps banks, healthcare providers, payroll processors, and supply chain operators give their trading partners a simple, secure way to send files in. Book a personalized demo or get a quote from one of our MFT experts today.
THE FRICTION PROBLEM
Your trading partners may not be IT specialists.
When you ask partners to install an SFTP client, generate a PGP key pair, exchange public keys, and follow a multi-step PDF whenever a key expires, you typically get one of three outcomes.
TWO WAYS TO USE IT
Browser exchange, with or without PGP enforcement.
The Web Transfer Portal gives partners a browser-based way to send and receive files. PGP encryption is optional, applied automatically when your policy requires it.
- No software to install. Partners use any modern web browser
- Branded portal at your own domain (e.g. transfers.yourcompany.com)
- Partners log in with the credentials they already have
- Every action is logged for compliance and audit
- PGP encryption applied at the partner’s browser, before the file leaves their machine
- Files arrive on your server already encrypted, ready for downstream processing
- Keys are server-managed and rotated automatically. No partner-side key handling
- No Kleopatra, no GPG4Win, no PGP training for partners
FROM THE PARTNER’S POINT OF VIEW
Three steps total. That’s the whole flow.
No client install. No PGP key exchange. No multi-step instruction PDF. Just a browser, a login, and an upload.
Secure financial statements with trading partners, data lake & cloud computing integration. With many protocols available, Diplomat MFT can move just about any file anywhere.
Applications Engineer · G2 Verified Review
★★★★★
PGP Encryption Software Comparison
Manual PGP tools vs Diplomat MFT 9.5 | side by side
Tools like Kleopatra and GPG4Win are capable PGP implementations. They work fine for technically proficient individual users. The problem is operational: when you need to enforce PGP across dozens or hundreds of trading partners with varying technical skill levels, manual tooling breaks down. This is where automated PGP encryption software changes the picture.
| Feature | Manual PGP(Kleopatra / GPG4Win) | ✔ Recommended Diplomat MFT 9.5Automated PGP |
|---|---|---|
| Software install required | Yes. GPG4Win + SFTP client | No. Any browser |
| Key generation | Manual (Key Pair Wizard) | Automatic |
| Key management | Manual: export, email, import | Automatic, server-managed |
| Key expiry handling | Manual. Repeats every 1–2 years | Automatic key rotation |
| Steps to send first file | 14+ | 3 |
| User skill required | Intermediate technical | None |
| Risk of user error | High. Manual steps every transfer | Near zero. Policy-enforced |
| Audit trail | None | Full. Every session timestamped |
| Browser-based uploads | No | Yes. With automatic PGP |
| Compliance enforcement | Depends on individual user | Policy-enforced, non-bypassable |
WORKED EXAMPLE
A bank receiving daily settlement files from 80 correspondent partners.
PGP encryption is mandatory on every file received. Most partners are too small to run dedicated IT. Here is how the bank uses the Web Transfer Portal.
The bank creates a branded portal URL (for example, transfers.bank.com) sitting behind the Diplomat MFT security perimeter. No software is installed at the partner end.
Each correspondent receives the portal URL by email. They sign in using the same credentials they already use to send files. No new account is created.
A partner drags a settlement file into the browser. Diplomat MFT encrypts it with PGP inside the browser, before the file leaves the partner's computer. The partner sees no keys, no plug-in, and no extra step.
The encrypted file lands on the bank's server, still unreadable to anyone without the bank's private key. The bank's own systems decrypt it when ready to process the payment data.
INDUSTRIES
Where the portal pays off.
Three industries where browser-based file exchange, with optional PGP enforcement, solves a daily compliance headache.
JPMorgan and other major banks require PGP encryption on inbound files. Many of their correspondent partners are too small to run dedicated IT. The portal removes the onboarding bottleneck.
HIPAA requires that protected patient information is encrypted when sent between organizations. PGP is the accepted standard. Clinics and labs join your supply chain in minutes, not weeks.
PGP works across different technologies, so your partners can use whatever software they already have. The portal removes the need to standardize on a single technology stack across the network.
SECURITY
Built into every transfer.
WHERE IT FITS
Two ways in. One source of truth.
The Web Transfer Portal is one of two ways your partners can connect to the same set of files. The other is SFTP. Whichever route a partner takes, your files and folders, audit logs, and downstream automation all point to the same single source of truth.
The Edge Gateway sits between the public internet and your file server, blocking unwanted traffic before it reaches you. The File Transfer Server hosts the files and folders. SFTP and the Web Transfer Portal are two different routes your partners can take to reach the same files. Diplomat Automation runs whatever needs to happen next: moving, decrypting, transforming, or forwarding the files into your downstream systems.
AVAILABLE ACROSS ALL EDITIONS
Web Transfer Portal is included in every Diplomat MFT edition.
What changes between editions is whether automatic PGP encryption is enforced.
FREQUENTLY ASKED
Common questions about the Web Transfer Portal.
What is the Diplomat MFT Web Transfer Portal?
The Web Transfer Portal is a browser-based interface that lets your trading partners send and receive files securely without installing any software. It runs on Diplomat MFT's File Transfer Server alongside the SFTP interface, with both routes pointing at the same files and folders.
Do partners need to install software to use the portal?
No. Partners only need a modern web browser. They can sign in, drag a file in, and upload it. No client software, no plug-ins, no PGP toolkit. This is the main reason organizations choose the Portal over SFTP for partner-facing exchanges.
Can the portal enforce PGP encryption on uploads?
Yes, when configured. PGP encryption is applied automatically inside the partner's browser before the file is sent. The file arrives on your server already encrypted, ready for your downstream systems to decrypt with your private key. PGP enforcement is an add-on for the Professional edition and is included in the Enterprise edition.
How does the Web Transfer Portal differ from the SFTP Server?
Both are routes into the same File Transfer Server. SFTP requires partners to have an SFTP client installed and configured. The Web Transfer Portal works in a browser with no setup. Most organizations use both. SFTP for technical partners with established workflows, the Portal for everyone else.
Which Diplomat MFT editions include the Web Transfer Portal?
All three editions (Standard, Professional, and Enterprise) include the Web Transfer Portal. The difference is that Professional and Enterprise can enforce automatic PGP encryption on uploads, while Standard cannot.
Can the portal be branded with our logo and our domain?
Yes. The portal can be branded with your logo, colours, and a custom subdomain (such as transfers.yourcompany.com). To partners it appears as your own application, not a third-party tool.
Is there an audit trail for files uploaded through the portal?
Yes. Every login, file upload, file download, and configuration change is logged with a timestamp, user identifier, and source IP. The audit log is searchable, exportable, and ready to drop into HIPAA, PCI DSS, or SOC 2 audit packages.
How does authentication work? Do partners need a separate account?
Partners use the same credentials they already have for SFTP access. There is no separate account to create or manage. If your partners are not yet on SFTP, you can create accounts directly in Diplomat MFT or, on the Enterprise edition, federate via LDAP or single sign-on.
Can we restrict the portal to specific IP ranges or partner organizations?
Yes. You can apply IP allow and deny rules, restrict access to defined CIDR ranges, and enforce per-user policies. Combined with Threat Intelligence, this means malicious or unexpected connection attempts are blocked before they reach the portal.
What happens to PGP keys? Do partners need to manage them?
No. Diplomat MFT handles PGP key generation, distribution, and renewal automatically. Partners never see or handle a key. When keys need to be rotated, the system updates them in the background. This is the single biggest practical difference between the Portal and a traditional PGP-over-SFTP arrangement.
Tools, Calculators & Resources
Validate your investment case, benchmark your current setup, and explore how Diplomat MFT compares, before you pick up the phone.
WHAT OUR CUSTOMERS SAY
G2 is the largest and most trusted software marketplace. More than 90 million people annually—including employees at all Fortune 500 companies—use G2 to make smarter software decisions based on authentic peer reviews.
Scott J.
Diplomat MFT has been a powerful workhorse for all of our enterprise file exchange for many years. No other enterprise application we use comes with the same level of support we receive from Coviant.
Eric D.
Director of Information Technology
The support is fantastic. I had to contact them on a few occasions – as it turns out, not for issues with Diplomat MFT but issues with one of the FTP partners. Coviant support stuck with me and went above and beyond to troubleshoot and figure out the issue.
Dave L.
Manager of Information & Technology
Diplomat MFT is a solid data transfer product, its easy to set up, and easy to use. I like the way the transaction builder is laid out. It’s so easy to understand what values it wants.
Adah B.
Extremely robust platform for managing our enterprise file transactions. Every upgrade provides us with additional useful tools to streamline our business processes.
Stephen H.
IT BI Analyst SE
I find the sftp file transfers to be the most helpful tool of Diplomat MFT. No need for programming, the interface is customized already and users only need to fill in the boxes.
Jeff M.
The interface and GUI are very straightforward. The options are simple and labeled so anyone can understand how to set up and configure. The ability to test something without actually sending something is also beneficial.