Capabilities
What xEvolve runs for regulated transfer
Managed file transfer on Cloudflare Workers — identity-bound operators, dedicated infrastructure per Environment, and one audit record per file moved.
-
14 protocol adapters
SFTP, FTP, FTPS, Amazon S3, Azure Blob Storage, Azure Files, Google Cloud Storage, Cloudflare R2, SMB, WebDAV, OneDrive, SharePoint, Google Drive, and NFS — each with its own credential model and connection test in one dashboard.
-
Entra ID SSO and TOTP MFA
Operators sign in through Spot Suite OIDC with Microsoft Entra ID, Okta, or any OIDC provider. TOTP enrollment is enforced on every account — Google Authenticator, Authy, 1Password, and other RFC 6238 apps.
-
Dedicated Environment isolation
Each customer Environment runs on its own Cloudflare Worker runtime with an isolated database and a dedicated R2 storage bucket. Transfer metadata and files are not co-mingled with another tenant.
-
Per-transfer audit log and export
Logins, uploads, downloads, and permission changes record user ID, client IP, and UTC timestamp. Export the audit packet for DORA, NIS2, GDPR, CIS, or vendor-risk reviews.
-
Secure data rooms
Share files with external parties in a controlled room. Assign viewer, editor, or manager roles per user. Every view and download is logged with actor identity and timestamp.
-
Cron scheduling
Schedule recurring transfers with cron expressions on Cloudflare Workers. Routes run at the edge without a separate job server or agent install on your network.
-
Folder watchers
Watch a source folder for new or changed files and trigger a transfer route automatically. Pair with workflows to branch on file size, name pattern, or delivery result.
-
After-transfer archiving
After a successful transfer you can leave originals, delete them, or archive originals to an archive folder.
-
File notifications — transfers that fire on arrival
Workflows trigger the moment a file lands in the source — Azure Blob Storage (Event Grid), or any system that can send a webhook. No polling intervals, no batch windows, no manual re-runs after an upstream delay. MOVEit's file notifications stop at shared folders; xEvolve covers blob storage.
-
Multi-step Tasks
Chain a Task across source → process → destination steps and run it on a schedule or on demand — one orchestrator for both manual and cron runs. Condition steps branch on the prior step’s file count, size, or status; webhook steps fire a signed HTTPS POST. Business plan adds outbound webhooks and API access for downstream automation.
-
In-flight file processing
Process steps transform the transfer working folder in place — find/replace in file contents and names, plus zip and unzip — without an external script host. The MOVEit built-in-scripts model, run at the edge.
-
Global parameters
Define reusable ${var} values once and resolve them into Task paths and step configuration across every workflow — the MOVEit global-parameters model, kept in one place.
-
Retention and legal hold
Business plan adds retention policies and legal-hold flags on transfer records and stored files. Held objects stay in your R2 bucket until an authorised release.
-
OpenPGP payload encryption
Encrypt files with partner-supplied PGP public keys before delivery, or decrypt inbound files with your own key pair. Private keys are stored encrypted in your Environment and never leave your Worker.
How a transfer runs
-
Connect source and destination
Pick an adapter — SFTP server, S3 bucket, SharePoint library, or any of the 14 supported endpoints. Enter credentials, run a connection test, and name the route.
-
Define the route or schedule
Set a one-time transfer, a cron schedule, or a folder watcher. Add workflow branches for retries, notifications, or alternate destinations when a step fails.
-
File moves encrypted
Payloads travel over TLS 1.3 between endpoints. Files at rest in your Environment R2 bucket use AES-256. Checksums are computed before delivery confirmation.
-
Audit record written
Each transfer writes an event with actor, route, file name, size, result, and IP. Export the packet from the console or hand it to compliance for mapping review.
Test one regulated transfer flow
Pick a protocol, connect one path, and export the audit packet. Card checkout includes a 30-day free trial.