AES-256 customer-data archives
FIPS 140-2 validated ZIP-AES + the strengthened PAE2 container with filename + size + timestamp encryption. Account numbers, customer names, and transaction metadata aren't visible in archive listings — keeps NPI off shoulder-surfable file lists.
Secure FTP with FIPS-validated TLS
SFTP and FTPS over Microsoft CryptoAPI's FIPS 140-2 validated TLS. Use for vendor file exchange, regulator submissions, intercompany transfers, and any partner integration covered by your information-sharing agreement.
Outlook encrypted attachments
One-click encrypts attachments to AES-256 directly in the Outlook ribbon. Defaults are admin-lockable: prevent users from sending unencrypted financial data to external counsel, auditors, or regulators by accident.
OpenPGP signing for audit packages
Sign and encrypt audit deliverables with OpenPGP — RSA-4096 / ECC P-384, SHA-256 / 384 / 512 hashes. Auditors verify provenance with their existing PGP toolchain. Works with both internal-audit and external-audit workflows.
VSS-aware Backup
Volume Shadow Service captures consistent snapshots of locked / open files (mailboxes, transaction logs, regulated workload data). AES-256 encryption by default. Routes to local NAS + cloud + offsite simultaneously per your business-continuity plan.
Password policy enforcement
Force minimum password length and required character classes (lower / upper / numeric / symbol) at policy level. Combined with the password-profile dropdown, eliminates shared-passphrase patterns that trigger audit findings.