FileCloud’s ITAR Compliance Center Makes Compliance Easier
ITAR (United States International Traffic in Arms Regulation) is a type of regulation for any company working in the manufacture, sale, or distribution of defense-related articles. These companies must comply with specific requirements to ensure confidential information is not leaked to civilians, criminals, or threats to the U.S. This is where FileCloud comes into play.
FileCloud’s ITAR Compliance Center
FileCloud’s ITAR Compliance Center organizes ITAR requirements and matches them with applicable FileCloud capabilities in one, easy-t0-use dashboard. This ITAR compliance dashboard captures the current compliance configurations, along with rules enforced or failed.
FileCloud’s Compliance Center pulls in a variety of security settings to support ITAR requirements, including SSL and encryption settings, customized metadata, Smart DLP, and smart classification.
Admins can set up DLP rules like “Confirm all users are US residents” to support the ITAR requirement that only users located in the United States can access ITAR-restricted data. Admins can also review, archive, and export reports and logs for managerial overview or external audit review processes.
The Compliance Center is a customizable tool that allows admins to configure the FileCloud environment in a way that best meets their file sharing and compliance needs. This is particularly useful for enterprises deploying multiple solutions that wish to avoid duplicating issue notifications.
Self-Host FileCloud on AWS GovCloud
For organizations that prefer to self-host their information infrastructure, FileCloud Server can be deployed on AWS GovCloud. Customers that also need to meet FIPS 140-3 requirements can work with FileCloud to configure FIPS mode on a supported Linux deployment with the appropriate FIPS license.
FileCloud Hosted solution: FedRAMP
For organizations needing a hosted solution, FileCloud offers a FedRAMP Certified, Class D (High) environment. This deployment is suitable for U.S. federal agencies and organizations that require a cloud service aligned with the former FedRAMP High baseline. Customers with FIPS 140-3 requirements can work with FileCloud to ensure those requirements are addressed within the supported environment.
FileCloud Retention Policies for ITAR Compliance
ITAR recordkeeping requirements apply to records related to the manufacture, acquisition, disposition, and export of defense articles and related technical data. FileCloud provides content lifecycle management capabilities, including retention and archival schedules, to help organizations manage records in accordance with their applicable ITAR retention requirements.
How FileCloud Supports ITAR File Sharing
Secure file sharing is essential for organizations handling export-controlled technical data. FileCloud provides security, access control, and governance capabilities that can help organizations support ITAR compliance, including:
- FIPS encryption on supported deployments
- Encryption for data at rest and in transit
- View-only Access
- Digital Rights Management
- Expiring Share Links
- Controls to Restrict Public Access
- Robust Login Security & Authentication Mechanisms
- Smart Data Leak Prevention
- Smart Content Classification
- Device Management (including Remote Wipe)
- Comprehensive Audit Trails