# SFTP To Go

> Fully-managed cloud storage that speaks standard protocols — SFTP, FTPS, Amazon S3 and HTTPS —
> for secure file access, transfer and management. It lets organizations exchange data with
> partners, vendors and customers without buying, running or maintaining their own file transfer
> servers and storage. Built on AWS with a multi-AZ architecture. A product of Crazy Ant Labs.

## What it is

SFTP To Go is a managed file transfer (MFT) and cloud storage service. Every account gets
credentials that work over SFTP, FTPS, the Amazon S3 API and a browser-based web portal, backed
by the same storage. Common uses: receiving files from partners, distributing files to customers,
replacing a self-hosted SFTP server, and automating file-driven workflows.

Key capabilities: SSH key authentication, two-factor authentication, single sign-on, static IP
addresses for allowlisting, inbound network rules, VPC peering, per-user home directories,
virtual folders, scoped permissions, shareable file and folder links, file automations, PGP
encryption and decryption, webhook notifications with automatic retries, email, Slack and
Microsoft Teams notifications, management REST APIs, audit logs and audit log streaming,
malware scanning, encryption at rest and in transit, high availability with unlimited concurrent
connections, dedicated instances, custom SFTP hostnames, custom SSL certificates, a
custom-branded web portal, and multi-region data residency.
Compliance: HIPAA (with BAA), SOC 2 and GDPR.

## Automations

Automations run file workflows without anyone having to be involved. An automation starts either
from a file event — a file or folder being created or deleted, a file being downloaded, or a file
being found to be infected by malware scanning — or on a schedule, and then runs an ordered list
of actions:

- Copy, move, rename, create or delete a file or folder.
- PGP encrypt or PGP decrypt a file, using keys held in the account.
- Wait for a delay before continuing.
- Send a webhook request, a Slack message, a Microsoft Teams message or an email.

Actions read values from the triggering event through variables, and any field can be computed
with an expression. Every run is recorded with its result, and a run can be started by hand or
repeated from its history. Automations that would trigger themselves are stopped.

## Virtual folders

By default a set of credentials is bound to one home directory. Virtual folders replace that with
a set of folders the credentials see after logging in, each mapped to a real location in the
storage and carrying its own permissions, from read-only to full access. One set of credentials
can reach several unrelated locations under friendly names without exposing a shared parent
folder, and a folder can be repointed without the connecting user or integration noticing.
Virtual folders work over SFTP, FTPS and the web portal.

## Product

- [Home](https://sftptogo.com/): Overview of the product and its main capabilities.
- [Pricing](https://sftptogo.com/pricing): Plans, limits and what every plan includes.
- [Security](https://sftptogo.com/security): Encryption, identity and access, network controls, operational security, monitoring and audit.
- [Compliance](https://sftptogo.com/compliance): Overview of the compliance posture.
- [HIPAA compliance](https://sftptogo.com/compliance/hipaa): How SFTP To Go supports HIPAA, including BAAs.
- [SOC 2 compliance](https://sftptogo.com/compliance/soc2): SOC 2 Type II reporting and controls.
- [GDPR compliance](https://sftptogo.com/compliance/gdpr): GDPR obligations, data processing and transfers.

## Solutions by industry

- [Healthcare](https://sftptogo.com/industries/healthcare): Exchanging protected health information (PHI).
- [Financial services](https://sftptogo.com/industries/finance): Secure financial data exchange.
- [Education](https://sftptogo.com/industries/education): Student and institutional data transfer.
- [Technology](https://sftptogo.com/industries/technology): File transfer for software teams and platforms.
- [Retail](https://sftptogo.com/industries/retail): Supplier, EDI and logistics file exchange.
- [Professional services](https://sftptogo.com/industries/professional-services): Client document exchange.

## Documentation

- [Documentation home](https://sftptogo.com/docs/): Full product documentation.
- [Connect using SFTP](https://sftptogo.com/docs/how-to-connect/connect-using-sftp): SFTP connection details and clients.
- [Connect using FTPS](https://sftptogo.com/docs/how-to-connect/connect-using-ftps): FTPS connection details.
- [Connect using Amazon S3](https://sftptogo.com/docs/how-to-connect/connect-using-amazon-s3): S3-compatible API access.
- [Web portal](https://sftptogo.com/docs/how-to-connect/connect-web-portal): Browser-based file access.
- [File browser](https://sftptogo.com/docs/getting-started/file-browser): Managing files in the browser.
- [Automating file workflows](https://sftptogo.com/docs/automation/automations): Triggers, actions, variables, expressions and execution history.
- [Management APIs](https://sftptogo.com/docs/automation/management-apis): Programmatic account management.
- [Webhook notifications](https://sftptogo.com/docs/automation/using-webhook-notifications-to-trigger-processes): Triggering processes on file events.
- [Email notifications](https://sftptogo.com/docs/automation/setting-up-email-notifications): Alerting on file events.
- [Security overview](https://sftptogo.com/docs/security/overview): Security model and controls.
- [SSH key authentication](https://sftptogo.com/docs/security/using-ssh-key-authentication): Key-based auth setup.
- [Static IPs](https://sftptogo.com/docs/security/using-static-ips): Fixed addresses for allowlisting.
- [Inbound network rules](https://sftptogo.com/docs/security/using-inbound-network-rules): Restricting who can connect.
- [User home directories](https://sftptogo.com/docs/security/setting-up-user-home-dirs): Scoping users to a folder.
- [Virtual folders](https://sftptogo.com/docs/security/setting-up-virtual-folders): Mapping several storage locations into one view for a set of credentials.
- [Audit logs](https://sftptogo.com/docs/security/audit-logs): What is recorded and how to export it.
- [Encryption keys](https://sftptogo.com/docs/security/encryption-keys): Managing PGP keys for encrypt and decrypt actions.
- [HIPAA in practice](https://sftptogo.com/docs/security/hipaa): Configuring an account for HIPAA workloads.
- [SOC 2 in practice](https://sftptogo.com/docs/security/soc2): SOC 2 controls and reporting.
- [Sharing files and folders](https://sftptogo.com/docs/getting-started/sharing-files-and-folders): Share links.
- [Creating and modifying users](https://sftptogo.com/docs/getting-started/creating-and-modifying-users): User management.
- [Trial accounts](https://sftptogo.com/docs/getting-started/trial-accounts): What a trial includes and how it converts.
- [Dashboard](https://sftptogo.com/docs/getting-started/dashboard): Usage, storage and transfer at a glance.
- [Organization settings](https://sftptogo.com/docs/getting-started/organization-settings): Members, roles and organization-wide options.
- [Account settings](https://sftptogo.com/docs/getting-started/account-settings): Personal profile, password and two-factor authentication.
- [Troubleshooting connectivity](https://sftptogo.com/docs/questions-and-answers/troubleshooting-connectivity-issues): Common connection problems.
- [Supported SFTP file operations](https://sftptogo.com/docs/questions-and-answers/supported-and-unsupported-file-operations-in-sftp): Which operations the SFTP endpoint accepts.
- [Known FTPS limitations](https://sftptogo.com/docs/questions-and-answers/known-limitations-with-ftps): Where FTPS behaves differently from SFTP.
- [Host keys and fingerprints](https://sftptogo.com/docs/questions-and-answers/host-public-key-and-fingerprints): Verifying the server.
- [Custom SFTP server name](https://sftptogo.com/docs/how-to-customize-my-service/setting-up-a-custom-sftp-server-name): Using your own hostname.
- [Custom SSL certificate](https://sftptogo.com/docs/how-to-customize-my-service/custom-ssl-certificate): Serving FTPS and the portal under your certificate.
- [Custom web portal](https://sftptogo.com/docs/how-to-customize-my-service/custom-web-portal): Branding the portal and using your own domain.

## Resources

- [Blog](https://sftptogo.com/blog/): Guides, comparisons and product updates.
- [API reference](https://sftptogo.com/blog/api-reference/): REST API reference.
- [Comparison hub](https://sftptogo.com/comparison): Comparisons with other file transfer products.
- [Contact](https://sftptogo.com/talk-to-a-human): Talk to a human.
- [About](https://sftptogo.com/about): About Crazy Ant Labs.

## Optional

- [Terms of Service](https://sftptogo.com/terms-of-service)
- [Data Processing Addendum](https://sftptogo.com/terms-of-service/dpa)
- [Privacy Policy](https://sftptogo.com/privacy)
- [Privacy and GDPR FAQ](https://sftptogo.com/privacy/gdpr)