Controlled B2B file exchange

Controlled file exchange for accountable business handoffs

My MX Data is a secure file exchange platform for organizations that send sensitive files to customers, vendors and business partners. Named-recipient access, configurable controls, detailed audit records and the patented ASR methodology give each exchange a clearer owner, purpose and history.

Start my 7-day free trial

No credit card required. Up to 5 users.

Discuss your B2B workflow
150K+file exchanges each week
10K+active users
1,000+Tier 1 suppliers connected
Where cross-company sharing breaks down

A controlled exchange across two sets of business rules.

A file can leave one company in seconds, while responsibility for it can last much longer. Security teams may use different controls, contracts may set different obligations, and employees still need a workable route. Without a shared process, email attachments, open links and unmanaged folders usually fill the gap.

What the sending team needs

Control before the file leaves

  • Confidence that the named recipient is the intended person
  • Access dates, download rules and permissions that fit the exchange
  • A reliable record of sending, access and download activity
  • An approved process practical enough for everyday use
What the receiving team needs

Clarity before the file arrives

  • A known sender and a clear business purpose
  • No need to open internal systems to another company
  • A straightforward way to upload, receive and discuss files
  • Activity evidence for customer, audit or internal review

MX creates one controlled exchange route between both organizations.

Neither company needs to open its internal network to the other. MX handles the exchange through named users, defined permissions and a traceable activity record. For customer-facing workflows, see how MX supports secure file sharing with customers.

A defined path for every handoff

How MX moves a sensitive file between named users

The user journey stays focused, while each stage creates a clearer governance record. Teams can control a routine handoff without turning it into a document management project.

Identify the sender and recipient

The sender chooses named recipients instead of creating an open link. The file stays connected to known users and a stated business purpose.

Set the exchange controls

Teams can apply AES-256 encryption, recipient permissions, access expiration and download conditions according to the file and workflow.

Apply ASR protection

MX applies its patented Anonymize, Shard, Restore methodology. Identifying context is separated from file data, protected shards are distributed, and the file is restored for an authorized recipient.

Review the activity history

Views, downloads and other relevant actions are time-stamped, giving the organization evidence to review later instead of relying on memory or email threads.

ASR works alongside encryption, identity and access controls. Read the technical overview on our encrypted file sharing page.

Built for the handoff, not the shared drive

A controlled exchange layer beside the tools your teams already use

Google Drive, Dropbox, OneDrive, SharePoint and WeTransfer cover many routine storage, sync and collaboration needs. MX is used when the recipient, access window and activity record require more deliberate control.

MX can sit beside existing storage and productivity systems. It gives sensitive inbound and outbound transfers a defined process without requiring every partner to join the same internal platform. Larger teams can also review our enterprise file sharing options.

Security and governance

MX: AES-256 encryption, ASR, named-recipient controls and detailed activity records are built into the exchange process.

i

Everyday tools: security may be strong, while governance still depends on the product, subscription, configuration and user behavior.

Recipient and access control

MX: files are sent to named users with configurable permissions, access expiration and download controls.

i

Everyday tools: shared links and persistent folders are convenient, but they often require closer policy and permission management.

Business context

MX: instructions and decisions stay close to the file activity through MX Conversations.

i

Everyday tools: real-time editing and synchronization support ongoing work rather than a defined external handoff.

Exchange lifecycle

MX: supports transfers without platform file-size limits and focuses on a controlled exchange lifecycle.

i

Everyday tools: storage, synchronization and long-term content access are often the main design goals.

Evidence for security, operations and audit

A clear record when someone asks what happened

A sensitive transfer is easier to review when the organization can identify the people involved, the controls applied and the timing of each action. MX keeps relevant exchange activity together so security, compliance and operations teams can work from the same record.

Chronological activity history

Uploads, access events, downloads and related actions can be reviewed in order.

Named-recipient accountability

Named users reduce ambiguity about who was authorized to receive the information.

Review-ready evidence

Activity records can support customer reviews, internal governance and external assurance work.

Explore all platform features

b2b-exchange-activity.log EXPORT READY
UPLOADCAD-PACKAGE-V12.ZIP - 6.1 GB
POLICYNamed recipient + expiration applied
ASRFile anonymized and sharded
VERIFYRecipient identity confirmed
RESTOREFile restored for authorized user
DOWNLOADAction recorded with time and access context
EXPIRYAccess removed under sender policy
Controls for managed B2B exchange

Practical safeguards for files with a defined recipient and purpose

MX is designed to reduce risky workarounds without making the recipient experience difficult. The controls below help teams create a consistent, accountable transfer process.

Named-recipient access

Files are exchanged between specified people instead of through open links that can be forwarded outside the intended audience.

Exchange-wide audit history

Relevant file actions are recorded with user and time context, giving teams clearer evidence when an exchange is reviewed.

Large file transfer

Transfer engineering datasets, medical imaging, media, software packages and other large business files without a platform file-size limit.

Explore large file transfer

Access windows and permissions

Set access periods, recipient permissions and download conditions that reflect the sensitivity and purpose of the exchange.

Controlled upload portals

Collect sensitive files from customers and partners through an approved intake route instead of asking them to use email.

Explore upload portals

Data location options

Choose approved storage regions where available to support contractual, policy and data location requirements.

MX Conversations

Keep instructions and decisions close to the file activity so important context does not drift into separate email threads.

Explore secure collaboration

Branded recipient experience

Use a branded domain, logo and color scheme so customers and partners recognize the approved exchange route.

Compliance support, stated carefully

Technical controls and evidence for US information-handling requirements

My MX Data does not make an organization compliant by itself. MX provides access, security and audit controls that may support US information-handling requirements, depending on the organization's use case, configuration, contracts and legal obligations.

HIPAA CCPA SOX GLBA FISMA FERPA ITAR CJIS IRS Publication 1075 NIST SP 800-171
The important distinction: compliance depends on policies, contracts, configuration, training, identity management, endpoint security and wider governance. MX contributes technical controls and activity evidence for the file exchange itself.

Evidence for audits and reviews

Detailed records help teams show who accessed a file, when activity occurred and which exchange controls were applied.

Access limited to authorized recipients

Named-user access and configurable permissions reduce reliance on public links and create clearer accountability for external sharing.

Time-based access controls

Time-limited access helps organizations avoid leaving sensitive files available longer than the business purpose requires.

Data location and administration

Storage-region options and administrative controls can help teams align the exchange with contractual, policy and regulatory considerations.

Why partner-facing teams keep using the approved route

Control only works when people can use it

Security teams need policy control and a dependable record. Customers, vendors and partners need a route that is clear enough to use without a training session. MX is designed to meet both needs in the same exchange.

Exchanging files with partners used to mean size limits, blocked emails and missing attachments. MX gave us one controlled route for contracts and reports, while the speed has kept projects moving.

Andrew F.Partner - Legal services

Different systems on each side made business file sharing awkward. MX gave us a clear process for sensitive documents, with named recipients and a record we can check afterwards.

Adam J.Director - Business partnerships

We exchange contracts and reports with other firms every day. Transfers are now quick, protected and easy to track. It feels like the process is finally under control.

Chris D.Director - Business development

Frequently asked questions

Questions teams ask before changing an external file process

These answers cover the practical issues raised by IT, compliance, operations and customer-facing teams. Broader product guidance is available in the My MX Data FAQ.

01How is MX different from a shared drive or public transfer link?

MX is designed for controlled handoffs between named users in different organizations. It is not intended to replace a shared drive, permanent archive or live editing suite. The focus is the moment a sensitive file crosses a company boundary.

That changes the process in practical ways:

  • Recipients are named. The sender does not need to rely on an open link that can be forwarded.
  • Controls are set for the exchange. Permissions, access expiration and download conditions can match the purpose of the handoff.
  • Activity is recorded. Teams can review access and download events without reconstructing the sequence from email.

For larger deployments, see how secure enterprise file sharing software can support departments, subsidiaries and partner networks.

02How does MX protect files during an external transfer?

MX combines AES-256 encryption with its patented Anonymize, Shard, Restore methodology. ASR separates identifying context from file data, distributes protected shards and restores the file after an authorized recipient completes the required access process.

ASR works with named-recipient access, configurable permissions, multi-factor authentication, access expiration and detailed activity records. No security method should be described as unbreakable or as a guarantee against every present or future threat.

The encrypted file sharing page explains how these controls fit into the wider exchange process.

03Can access rules vary by customer, vendor or project?

Yes. MX lets teams build exchanges around named users and apply controls that fit the file, relationship and expected access period.

A vendor receiving engineering drawings can have a different access profile from outside counsel reviewing a contract or a customer submitting due diligence materials. Teams can vary recipient permissions, access expiration, download conditions and account controls.

Branding and administrative options can also help external users recognize the approved route. The enterprise file sharing page covers broader identity, administration and deployment requirements.

04How can MX support US compliance requirements?

MX can provide access controls, encryption, administrative oversight and activity evidence that may support an organization's wider compliance program. The platform does not make an organization compliant on its own.

Depending on the organization and use case, MX controls may be relevant to requirements associated with HIPAA, CCPA, SOX, GLBA, FISMA, FERPA, ITAR, CJIS, IRS Publication 1075 and NIST SP 800-171. Applicability depends on configuration, contracts, policies, legal obligations and the wider technical environment.

Review the relevant guidance for HIPAA-focused file exchange, CCPA-related file sharing, NIST SP 800-171 and ITAR workflows, then confirm requirements with qualified legal, compliance and security advisors.

05Is there a file size limit for B2B file exchange?

MX supports transfers without a platform file-size limit. That can help when a workflow includes CAD models, engineering datasets, high-resolution media, medical imaging, research files, software packages or large collections of supporting documents.

Keeping large transfers in the same approved process can reduce the pressure to split archives, over-compress files or move work through personal accounts. The named-recipient, permission and audit controls remain part of the exchange regardless of file size.

Transfer time still depends on connection speed, local network policy and the route between locations. Teams planning higher volumes can review MX plans and enterprise options or discuss expected usage with My MX Data.

06Is MX practical for nontechnical customers and partners?

The recipient experience is designed to keep the approved route straightforward. External users can upload or download files without being given access to your internal network, shared drive or document management environment.

Clear invitations, named-user accounts and a focused handoff reduce the need for lengthy instructions. A branded domain, logo and color scheme can also help recipients recognize that they are using the correct service.

For a larger rollout, administrators can define partner groups, user roles and exchange controls before inviting external teams. Many organizations start with one workflow, review how recipients use it, then extend the same model across more customers, vendors or departments.

Put one approved route around your next sensitive exchange.

Test MX with a real customer, vendor or partner workflow. See how named users, activity records, access controls and transfers without a platform file-size limit work together in one practical exchange process.

7-day trial Up to 5 users No credit card Named-recipient access
View in