Interview with Eli Bernal: How Can We Make Remote Work a Safe Way to Work?

What are Tranxfer’s origins? How has it evolved so far?

Tranxfer is a cybersecurity-focused software company that was founded in Barcelona in 2013 as an ad-hoc project for a major Spanish bank. After the project was consolidated in 2017, we decided to establish the company as Tranxfer, under the umbrella of Iris Venture Builder (a venture capital firm dedicated to the creation and development of technology-based startups in the cybersecurity and intelligence sectors) to make this technology available to other companies. Now Tranxfer is accessible to all companies and has earned the trust of major corporations, many of which are part of the IBEX 35, offering a variety of models tailored to their needs.

Tranxfer is a platform for secure information exchange, always with the goal of offering maximum ease of use, both for its platform and for its integrations with the most widely used digital work ecosystems. With this in mind, a plugin for the Microsoft stack—covering both Teams and Outlook—was recently launched, thereby offering all companies that use Microsoft’s digital workplace access to Tranxfer without having to leave their usual work environment.
With the rise of hybrid work, sharing information and files—which are sometimes very large—no longer takes place, as it used to, within an office or an internal network. Now it is necessary to send files very frequently, and sometimes large ones. Not only to other companies, but also to employees working remotely at least part of the week. How can Tranxfer help facilitate this process?

Remote work has boosted the use of the digital workplace. Companies have digitized their work processes, making the exchange of files or information via digital channels a common practice for any employee.
Repositories work very well for sharing among colleagues, but they are not the preferred channel for exchanging information with third parties. Much of this communication takes place via email, which creates security risks such as “man-in-the-middle” attacks and the indiscriminate storage of attachments in the inbox, effectively turning it into a second repository… Additionally, email attachment size limits encourage “Shadow IT” among employees, who seek alternative ways to send these large, heavy files using third-party applications not approved by the CISO and which, in many cases, do not comply with security policies.

Tranxfer offers a secure channel for sending and receiving large files, complete with traceability to ensure regulatory compliance (among other features). By using this channel, companies and employees resolve all the issues mentioned above through a secure method approved by the IT department for information exchange.

Files must be transferred securely and with complete confidentiality, especially when dealing with sensitive information. How does Tranxfer guarantee the security of transfers? What technologies does it use to achieve this?
Tranxfer’s secure channel encrypts all files using end-to-end encryption, with a unique code for each transfer. It also includes a configurable two-factor authentication module and a unique checksum associated with the sending and receiving of the transfer, to assure the recipient that the content is original and has not been modified or maliciously swapped during transmission. Once the transfer is sent, it offers traceability, meaning the sender can see if the recipient has opened the transfer, downloaded the files, or just read them, and how many times they’ve done so. It is a platform that complies with all standards set by the National Security Scheme, and therefore we hold its certification. It is GDPR compliant, adheres to current data protection regulations, and all data is exportable for audit compliance.

What measures can a company take to prevent data and information leaks? And to protect itself from attacks?
Data leaks are very common, and in many cases, unintentional. When working in digital environments and storing all our data in the cloud, we sometimes forget what’s inside when sharing folders, or we upload files to folders without checking who has access to them. That is why it is vitally important to restrict file sharing and limit the repository to internal use. To prevent these leaks through other channels, such as email or Tranxfer, we use a fully configurable DLP module to set rules governing which information is permitted to be shared and which is not.

It also offers the option to send files in “View-only” mode, so the recipient cannot download and permanently save the file. Once the transfer period has expired, the file will be deleted. To prevent attacks, it features a built-in antivirus that scans all files passing through Tranxfer, thereby eliminating the possibility of downloading a malicious file. By using Tranxfer, recipients can be sure that the email content and its attachments or links are completely authentic and free of malware. The platform is bidirectional; Tranxfer users can send a link to have documents sent to them via Tranxfer, even if the sender does not have a Tranxfer account, thereby also protecting everything that enters their network perimeter

What are Tranxfer’s goals for the future? What new features do you have in store or are planning?

Tranxfer recognizes that one of the main cybersecurity challenges companies face is a lack of employee awareness. Tranxfer aims to assist companies and their employees in this area, which is why we offer user training and awareness programs
On the product side, we will continue to strengthen our partnership with Microsoft and proceed with the integration of Tranxfer with other platforms such as Google Workspace, Google’s virtual workspace, and Salesforce.

On the business side, Tranxfer is focusing part of its efforts on international expansion, entering the French market and expanding its services in Latin America, with a particular focus on countries like Chile where GDPR-style laws are becoming a reality

 

ELI BERNAL

Partner – VP Global Sales & Innovation

TRANXFER

Trazabilidad, control total y cumplimiento

en un solo entorno seguro y fácil de usar

Más artículos