Evaluate The Security Software Company Axway On Compliant File Sharing May 2026

| Product | Primary Function | Compliance Angle | | :--- | :--- | :--- | | | Managed File Transfer (MFT) server | Audit trails, encryption (PGP, AS2, SFTP, FTPS), tamper-proof logging, role-based access | | Axway Syncplicity | Enterprise file sync & share (EFSS) | Data loss prevention (DLP) integration, remote wipe, granular sharing policies, classification labels |

Its flagship product, Axway SecureTransport , combined with Syncplicity (acquired for edge sync/share), creates a hybrid model—MFT for B2B/governed flows + enterprise file sync and share (EFSS) for internal collaboration. | Product | Primary Function | Compliance Angle

This report examines Axway not as a generic cloud storage vendor (like Box or Dropbox), but as a provider whose core value proposition is secure, audited, policy-driven file movement. 1. Executive Summary Verdict: Axway is an enterprise-grade, highly compliant solution for file sharing, but it is not a user-friendly, ad-hoc collaboration tool . It excels in regulated industries (finance, healthcare, government) where audit trails, encryption in transit/at rest, and non-repudiation are mandatory. supports FIPS 140-2 validated cryptography.

SecureTransport acts as the governed backbone for automated, high-volume exchanges (e.g., bank-to-bank statements). Syncplicity provides the user-facing layer for employees sharing files internally/externally under IT control. 3. Compliance Framework Mapping Axway explicitly maps its features to major regulations—a critical evaluation point. TLS 1.3 in transit

The interface and policy engine are complex for non-technical users. For simple compliant sharing, it is overkill and expensive. 2. Product Portfolio for Compliant File Sharing Axway’s compliant file sharing rests on two pillars:

| Regulation | Requirement | Axway’s Capability | | :--- | :--- | :--- | | | Right to erasure, data portability, breach notification | Syncplicity supports retention policies and user deletion; SecureTransport logs can be exported for DSARs. | | HIPAA | BAA required, access logs, encryption, automatic logout | Axway signs BAAs. Supports AES-256 at rest, TLS 1.3 in transit, and detailed access audit trails. | | PCI DSS | Protect cardholder data, track access | SecureTransport supports PGP encryption for files with PAN data; logging includes who accessed what file when. | | SOX | Change controls, audit trails, separation of duties | Role-based access control (RBAC) in both products; immutable audit logs for file events. | | FedRAMP / IL (Gov) | Controlled unclassified information (CUI) protection | Axway has FedRAMP Moderate authorization for certain deployments; supports FIPS 140-2 validated cryptography. |