AES-256 encrypted archives
Full ZIP-AES at 128 / 192 / 256 bits + the strengthened PAE2 container with filename + size + timestamp encryption. PHI metadata isn't visible in archive listings — important for shoulder-surfing-resistant patient-data workflows.
Secure FTP / SFTP for vendor exchange
FIPS 140-2 validated TLS via Microsoft CryptoAPI. Use for billing clearinghouse uploads, lab integration, payer EOB exchanges — anywhere PHI moves between organizations and SFTP/FTPS is required by the BAA.
Outlook encrypted attachment add-in
One-click encrypts attachments to AES-256 directly in the Outlook ribbon — no separate workflow, no helpdesk training. Defaults are admin-lockable: prevent users from sending unencrypted patient data accidentally.
VSS-aware Backup
Volume Shadow Service captures consistent backups of locked / open files (mailboxes, EHR adjunct databases, departmental file shares). Encrypts with AES-256 by default; routes to local NAS + cloud + offsite simultaneously.
DoD-style file wipe
Built-in File Wipe (DoD 5220.22-M-suggested) for end-of-life clinical workstation decommissioning, returned-leased-hardware sanitization, and post-litigation hold purges. 1, 3, or 7 passes per your security policy.
Password policies + audit log
Force minimum password length and required character classes per administrator policy. Combined with the password-profile dropdown, eliminates shared-passphrase anti-patterns common in clinical environments where shift-change handoffs happen frequently.