PCI compliance

All of the Hosted~FTP~ infrastructure including our Amazon Web Services (AWS) file transfer SaaS infrastructure and credit card payment processing infrastructure is fully PCI compliant. Hosted~FTP~ shares the responsibility to determine the nature of the data and securely processes and stores customer data without impacting compliance in the customer’s data environment.

Hosted~FTP~ encrypts all data (including metadata) in transit, upon arrival, and at rest with 256-bit AES encryption where only the intended parties are able to access specific data based on the permissions set by the owner of the data.

Using 100% AWS, Hosted~FTP~’s infrastructure is in Amazon’s list of PCI compliant services and programs. See the full list here.

In addition to this compliance, Hosted~FTP~ is also fully HIPAA compliant and is audited annually. Hosted~FTP~ is completing our SOC2 T2 compliance audit for the trust principles of Security.

View the rest of our security model and compliance Here.