Secure File Transfer

Principal workflows

• Request: A staff member sends a client a secure upload request for the documents they need, and Kiteworks delivers files into a folder only the right people can see.
• Share: When documents need to go back to the client or to an outside adviser, staff send them through Kiteworks with access limits and expiry rather than as attachments.
• Retain and dispose: Files are kept for the periods your records schedule sets and then deleted, with legal holds when needed.
• Operate and review: Moraph monitors the platform, applies updates, handles changes and reports monthly on usage, incidents and access.

Who uses it

• Wealth management, trust and private banking teams collecting client documents
• Tax and accounting groups that receive tax returns and supporting records
• Lending teams that collect statements and tax documents from borrowers
• Compliance and information security officers responsible for customer information
• IT teams that want the platform run for them

Reporting

• Upload requests sent and documents still outstanding
• External sharing by team, recipient and expiry
• File activity for any document
• Retention, disposal and legal holds
• Access reviews by team manager
• Monthly service review

Features

• Secure upload requests: Staff send clients a link to upload specific documents, without the client needing an account or the files touching email.
• Client folders: Each client relationship has a folder whose access is limited to the staff who serve that client.
• Secure sending: Files are sent to clients and outside advisers through Kiteworks with view-only or download rights and an expiry date.
• Recipient verification: External recipients verify their identity before opening files, using the methods your policy requires, such as a one-time code.
• Email client add-in: Staff send secure upload requests and files from their email client, so the secure route is also the convenient one.
• File scanning: Uploaded files are scanned for malware, and can be checked by your data loss prevention tool, before staff open them.
• Encryption: Kiteworks encrypts files in transit and at rest.
• Retention and disposal: Retention periods per folder type, automatic deletion at the end of retention, and legal holds that stop deletion.
• Activity logging: Every upload, view, download, share and permission change is logged with the person and time.
• Branding: Upload pages and notifications carry your firm's name and logo, so clients recognize where they are sending documents.
• Managed operation: Moraph monitors the platform, applies updates, manages configuration and answers your help desk's escalations.
• Access reviews: Periodic lists of who can see each client folder, sent to team managers for confirmation, with removals tracked.

Integrations

• Identity provider: Staff sign in through your identity provider with multi-factor authentication, using SAML.
• Email client: An add-in lets staff send upload requests and secure shares from their email client.
• Malware scanning: Uploaded files are checked by malware scanning before staff open them.
• Data loss prevention: Outgoing shares can be checked by your data loss prevention tool, such as Moraph's managed Data Loss Prevention service.
• Document management: Uploaded documents can be moved into your document management or client record system after review.
• Security monitoring: Activity logs forwarded to your SIEM or security operations provider.
• IT service management: Incidents and change requests exchanged with your service desk tool.

Deployment

• Hosted by the vendor: Kiteworks hosted in the region you choose, configured and operated by Moraph.
• Your own cloud tenant: Kiteworks deployed in your own cloud subscription for firms whose policies require it, with Moraph operating it under logged administrative access.
• On-premises: Kiteworks installed in your data center, with Moraph operating it remotely under your access controls.

Security and privacy

• Single sign-on: Staff sign in through your identity provider, so your password and multi-factor policies apply; external recipients verify their identity for each request.
• Role-based access: Client folders are visible only to the staff who serve that client; approving a policy exception is separate from requesting one.
• Encryption and keys: Kiteworks encrypts files in transit and at rest; where Moraph holds keys, staff cannot use them without explicit, time-bound authorization.
• Complete audit trail: Every upload, view, download, share, permission change and administrative action is logged with the person and time, and cannot be edited.
• No routine access to client files: Moraph engineers administer the platform without opening client files; any exception is requested, approved by your firm and logged.
• Data residency: Files are hosted in the region you choose: the United States, the United Kingdom or Australia.

Limitations

• Moraph is not Kiteworks. The platform belongs to Kiteworks, and Kiteworks' own service commitments, roadmap and outages apply to it.
• Licences are subject to Kiteworks' terms, including how users and storage are counted.
• It replaces email for sensitive documents only if staff and clients use it. Your firm decides whether to require it and how to tell clients.
• Once a recipient downloads a file, Kiteworks cannot control what they do with their copy. View-only sharing reduces this but cannot stop screenshots.
• It is not a tax preparation, document management or client portal system. Documents can be passed to those systems, but they are separate.
• Retention periods, sharing rules and legal holds are your firm's decisions; Moraph implements and reports on them.
• Malware and data loss prevention checks reduce risk but cannot detect every harmful or sensitive file.
• Moraph supports your compliance with GLBA, Section 7216 and other requirements but does not determine whether your firm meets them.

Next steps

Book a demonstration or a technical briefing at www.moraph.com/solutions/secure-file-transfer. Purchasing routes and company information: www.moraph.com/how-to-buy.