What is SYNC?

The Sagacity Transfer Portal (SYNC) has been built to provide you with a secure method of sharing sensitive content with us. It provides a simple and easy-to-use HTTPS web interface with the capability to upload and download data securely using HTTP/S, SFTP, FTP/S and WebDAV to S3 and other cloud storage backends.

High Level overview and connection examples:

Security

Security is paramount at Sagacity, with multiple security precautions in place for the safe transfer and storage of your data.

Data Handling:

All data transferred is encrypted both in transit and at rest. We use AES-256 encryption for all zip files, which are also password-protected
Server-side encryption for data at rest is handled by AWS SSE-S3 (also AES-256), a feature natively integrated with SFTPGo when using S3 storage

User and Access Control:

Each user is assigned one or more private "storage locations" based on their specific requirements
Each storage location is secured and dedicated to an individual client. Access is strictly restricted to registered users only

Authentication and Access Security:

Two-Factor Authentication (2FA) is available and highly recommended for all transfer methods (SFTP, FTPS, etc.). A one-time code is generated from a registered authentication device (e.g., Google Authenticator, Microsoft Authenticator). This is required on a new device, a new browser, and as part of randomized security checks
To prevent brute-force attacks and other malicious activities, automatic IP blacklisting is implemented to help protect against DoS (Denial of Service) and password-guessing attempts. This is a configurable feature within SFTPGo that automatically blocks IPs after a certain number of failed login attempts (Login not allowed from this IP address warning - How to find your external IP address : Sagacity)

Monitoring and Management:

Comprehensive logging is in place for all user actions and transfers, providing a full audit trail
Real-time alerting is configured to notify our team of any suspicious activity or security events
The platform is independently penetration tested on an annual basis to ensure its security posture
The service is fully managed and supported by Sagacity employees within our AWS infrastructure

Retention

Data is retained for 30 days then is deleted

Capability

The following protocols are supported:

SFTP — Secure file transfer over SSH, supports key-based login, resume, directory operations, and checksums (How to access SYNC using SFTP / FTPS : Sagacity)
SCP — “Secure copy” over SSH, simple point-to-point copying with limited features (no resume/rename/list)
FTPS — FTP wrapped in TLS encryption, encrypts control and data channels (How to access SYNC using SFTP / FTPS : Sagacity)
HTTPS / Web-UI — Browser-based transfers over HTTPS; drag-and-drop uploads/downloads with no client installation (How to access SYNC using a browser / HTTPS : Sagacity)
API — RESTful HTTPS endpoints with token-based authentication for programmatic uploads/downloads and automation
WebDAV

Getting Started

Before using SYNC, you will need an account created for you. To request an account, simply submit a request to either your Account Manager or Sales Representative, providing a valid email address. Once your account is set up, you will receive an email with instructions on how to set your password and get started. (Activate your SYNC account : Sagacity)

Password Policy

Passwords must be at least 12 characters and include at least one upper + one lower + one number + one special character. (Sync password requirements : Sagacity)