MnemoShare Reviews & Product Details

MnemoShare is a secure data exchange and compliance platform for regulated industries, built for healthcare organizations (payors, providers, clearinghouses) and banking and financial institutions. It unifies managed file transfer, no-code workflow automation, secure forms with e-signature, and email security in one Kubernetes-native platform, delivered as SaaS or self-hosted. Every exchange is identity-bound and ephemeral: hardware-backed keys and short-lived tokens replace static credentials and standing access, and every action is recorded in a tamper-evident audit chain.The platform gives organizations the controls and evidence they need to support their own HIPAA, HITRUST, SOC 2, PCI-DSS, SOX, GLBA, and 21 CFR Part 11 compliance programs. Key Features and Functionality: Secure File Transfer & Sharing: Send files with expiring, access-controlled links, or exchange them through shared, personal, and home folders with nested subfolders, folder-level ACLs, and lifecycle policies. Dynamic questionnaires can gate uploads and downloads, and every transfer is checksum-verified. Access via web UI, CLI, or the MnemoZilla desktop client. Workflow Automation: Design no-code workflows with scheduled or event-driven triggers and reliable saga-based execution. Built-in support for HIPAA EDI (837, 835, 270/271, 834, 820), ISO 20022, SWIFT FileAct/InterAct, EBICS 3.0, and MT940/MT942/MT103/BAI2 conversion, with SFTP, FTPS, and rsync connectors for trading partners. Secure Forms & e-Signature: Build secure forms from PDF templates with multi-signer and counter-signer rosters, identity-bound submissions, and signed, verifiable completed documents. Email Security: Inbound and outbound gateway with policy enforcement, DLP, and quarantine. AI-assisted business email compromise and account-takeover detection, mailbox monitoring for Google Workspace and Microsoft 365, phishing simulation campaigns, and full SPF/DKIM/DMARC/ARC mail authentication. DLP & Threat Protection: AI-powered PHI and PII detection with pattern and policy rules, inline ClamAV malware scanning before storage, hash blocklists, behavioral anomaly detection, impossible-travel and GeoIP enforcement, and time-of-day access policies. Identity & Hardware-Bound Access: Passwordless passkeys (WebAuthn/FIDO2), TOTP MFA with backup codes, and SSO via SAML or OIDC (Keycloak, Okta, Azure AD, Google Workspace). Hardware mTLS binds users to Secure Enclave, YubiKey, or TPM keys issued by an ephemeral certificate authority, with device approval and an option to require hardware keys for all file operations. Account lifecycle controls handle activation, expiry, and automated removal. Encryption & Key Management: AES-256-GCM application-layer encryption before data reaches storage, backed by KMS/HSM envelope encryption with per-organization customer-managed keys (AWS, GCP, Azure KMS, or PKCS#11). Per-file data keys are bound to their file and owner, with scheduled rotation and rewrap and per-organization storage isolation. Audit, Compliance & Reporting: Synchronous, hash-chained audit logging with integrity verification and retention tombstones, SIEM export, a compliance posture dashboard, generated compliance reports, legal holds, and webhooks for downstream systems. Migration & Integration: Importers for MOVEit, GoAnywhere, GlobalScape, and Kiteworks, a full REST API with scoped API keys, and an MCP server so AI assistants can administer the platform. Runs on MongoDB or PostgreSQL, MySQL, SQL Server, Oracle, SQLite, and Db2. Primary Value and Problem Solved: MnemoShare addresses the need for secure, compliant data exchange in industries that handle sensitive information, and replaces the fragmented stack of legacy MFT, e-signature, and email-security tools that regulated organizations typically run side by side. By replacing static credentials and standing access with identity-bound, ephemeral exchanges and customer-controlled encryption keys, it removes the long-lived secrets that modern attackers target. Tamper-evident audit trails, inline DLP and malware scanning, and built-in compliance reporting give organizations the evidence their HITRUST, SOC 2, and HIPAA assessors expect, while migration tooling makes it practical to retire incumbents such as MOVEit and GoAnywhere.