MFT security controls buyers expect in 2026

Vendor security questionnaires in 2026 assume cloud-native MFT, not appliance SFTP. The baseline moved.

Non-negotiables

• OIDC / Entra SSO — no local-only passwords for operators
• Single sign-on for every operator account
• Dedicated tenant isolation (compute, metadata DB, object storage)
• Per-transfer activity log, with audit export on request
• 13 protocol adapters so you do not keep shadow FTP servers

xEvolve ships these as defaults on every plan, from €99 per Environment per month, with no surprise modules.