Phase 01In progress · Jul–Dec 2026
Assessment and governance
Complete cryptographic inventory (CBOM) in CycloneDX format and an active cryptographic review committee, overseen by and reporting directly to the CISO.
ProgressIn progress
Quantum computers do not yet exist at the scale needed to break today’s encryption. But attackers are not waiting for them: they capture encrypted data now to decrypt it as soon as they can. That is why we have launched a full migration process, with public, verifiable milestones.
A migration to post‑quantum cryptography with public, verifiable milestones. A structured process with concrete dates, reviewed every quarter.
Complete cryptographic inventory (CBOM) in CycloneDX format and an active cryptographic review committee, overseen by and reporting directly to the CISO.
NIST‑approved algorithms across the entire platform. Critical and internet‑facing systems are migrated first. In some components we combine classical and post‑quantum encryption during the transition to preserve compatibility.
Constant review and updates as new standards and suppliers emerge, tracking each supplier’s PQC status and reviewing every new NIST guideline. It is not a one‑off migration: it is an ongoing process.
A file encrypted today may seem out of reach. But an attacker does not need to break that encryption right now: all they need to do is keep a copy and wait.
Once quantum computing reaches the required capability, those files will be exposed, even years later. The tactic already has a name: harvest now, decrypt later.
It mainly affects information that must remain confidential for years: contracts, intellectual property, customer data and legal communications. This is not a hypothetical threat to deal with someday. It is the reason we have already started.
Harvest now, decrypt later
The attacker intercepts and stores communications encrypted with current algorithms (RSA, ECC). The encryption looks secure and capturing it costs almost nothing.
The data sits in storage. The attacker waits for quantum computing to reach the required capability.
A quantum algorithm breaks the encryption retroactively. Contracts, communications and data are exposed, even if they were sent years ago.
Migrating to post‑quantum cryptography protects the data transferred today against attacks that will happen in the future.
Our migration follows the internationally recognised frameworks set by NIST and the European Union.
Key exchange
Module‑lattice‑based key encapsulation mechanism.
Replaces RSADiffie‑Hellman
Digital signature
Module‑lattice‑based digital signature algorithm.
Replaces ECDSARSA‑PSS
Hash‑based digital signature
Stateless hash‑based digital signature. It relies on a different mathematical principle from ML‑KEM and ML‑DSA.
Backup signature: if a weakness were found in lattice‑based algorithms, SLH‑DSA would remain secure.
Beyond the NIST standards, our migration is aligned with the EU timeline for adopting quantum‑resistant cryptography. Every component (in‑house code, third‑party libraries and external services) goes through a review that determines its status and, where needed, its replacement plan.
Here is how we protect everything else.
Content protection
Data loss prevention built into the transfer flow, with no external agents.
Files are scanned before distribution, without leaving the Tranxfer platform.
Persistent protection that stays active even after the recipient downloads the file.
Every downloaded file is encrypted with no user action required.
Access control
Fine‑grained control over who can view, download or forward each file.
Recipients can view the content without being able to download it.
Recipient identification embedded in the document for forensic traceability.
Access can be revoked at any time, even after the first download.
Key management in external systems (AWS KMS, Azure Key Vault, on‑premise HSM).
Qualified timestamping issued by the FNMT (Spanish Royal Mint), legally valid across the EU.
Tranxfer is AWS Qualified Software and an AWS Partner in Financial Services. It can also be purchased through AWS Marketplace.
Our security team can support you with technical documentation, updates on the migration status and answers to your due diligence requirements.