Industries
Banking and finance: vendor communication at your institution’s security level
In banks and financial institutions every file that comes in from an outside party is a security question, and every document must be auditable. Segment’s Transport Hub is one entry point for all communication with vendors: identified, encrypted, recorded and monitored around the clock.
- 50K+Vendors
- 500M+Invoices issued
- 250M+Orders
- 100+Buyers
What changes when you work through Segment
For the organization
- One entry point for all vendors instead of separate connections, with digital-certificate (PKI) identification and no passwords.
- Every incoming file goes through sanitization (CDR) and a Hash check against known malicious files, before it reaches the corporate network.
- A full record for audit: who sent, who received, when, from where to where, and a SHA-256 fingerprint for every message.
- 24/7 monitoring by a SIEM/SOC team and an MDR service, alongside WAF, IDS/IPS and DDoS protection.
For vendors
- One clear way to send and receive documents from the institution, instead of different procedures for every department.
- A receipt confirmation for every message, and a clear status for every invoice.
- A failed transfer is retried automatically, with no support ticket.
- Support for the common protocols: SFTP, AS2, API and more.
What flows through the platform
Every document is sent once, reaches both sides at the same moment and is kept in a secure archive.
Invoices
From vendors and service providers, checked before payment
Interface files
In all common protocols, through Transport Hub
Orders and confirmations
Purchase orders and vendor confirmations
Records
Timestamp, sender, receiver and SHA-256 for every message
Alerts
Traffic anomalies, reported in real time
The challenge
A financial institution needs to know at any moment who sent what, when and where, and to make sure vendor files bring no risk into the corporate network.
Manual processes and scattered systems make control and audit harder.
Transport Hub: one controlled gateway for all vendor communication
Instead of every vendor connecting in a different way, all messages and files pass through one point. The vendor identifies with a digital certificate (PKI), the message is sent over secure infrastructure, and on the way it goes through file sanitization (CDR): files of known types, such as PDF, XLSX and images, are taken apart and rebuilt without active or malicious content. Files whose Hash is known to be malicious are blocked automatically.
Every message is fully recorded, with a timestamp and a SHA-256 fingerprint that proves it was not changed on the way. The records serve audit and forensic needs in line with cyber standards.
Built for volume and for audit
The infrastructure is built for high traffic and growth, runs with full redundancy and is protected against DDoS and brute-force attacks. Every intrusion attempt is monitored by the SIEM/SOC team and reported in real time, alongside blocking the attacker.
Segment is certified to ISO 27001 and ISO 27017, is audited under SOC 2 and meets Amendment 13 of Israel’s Privacy Protection Law. Certification documents are available on request in the Trust Center.
The process, end to end
This is how a message or file from a vendor moves through Transport Hub, Segment’s message exchange.
- 01Identification
The vendor logs in with a digital certificate (PKI), with no passwords.
- 02Sending
The message or file is sent over secure infrastructure.
- 03Checking
Files go through sanitization (CDR) and a Hash check against known malicious files.
- 04Recording
A timestamp, the sender, the receiver and a SHA-256 fingerprint are kept.
- 05Delivery
The message is delivered, and a failed transfer is retried automatically.
How Segment helps
A full record of every message
Every message sent or received is recorded: who sent it and who received it, when, and where it came from and went.
SHA-256 signature
A SHA-256 fingerprint is kept for every message, proving it was not changed on the way.
PKI certificate login
Login is verified with a digital certificate, so only authorized parties send and receive messages.
File sanitization (CDR)
Files of known types are taken apart and rebuilt without active or malicious content before they reach their destination.
24/7 monitoring
A SIEM/SOC team and an MDR service monitor the platform around the clock, alongside WAF, IDS/IPS and DDoS protection.
Standards and certifications
ISO 27001, ISO 27017 and SOC 2, and compliance with Amendment 13 of Israel’s Privacy Protection Law.
Getting started
Committed to your success, from design to operation
- 01Demo meeting
We learn your processes and show you the platform.
- 02Design and planning
Tailored to your organization’s specific needs.
- 03Implementation and connection
Connection to your existing systems and your vendors.
- 04Operation and support
Fast, professional support for local and international customers.
Frequently asked questions
How do vendors identify themselves?
With a digital certificate (PKI) installed on the sending computer, with no passwords. Segment provides the server addresses, the user name and the signature file, or installs the S-Trans software remotely as a managed service.
What is Transport Hub?
The place where vendors send and receive messages, over secure infrastructure. Every message is fully recorded, and all message traffic can be audited end to end.
How do we make sure vendor files bring no risk?
Files of known types, such as PDF, XLSX and images, are taken apart and rebuilt without active content (CDR), and files whose Hash is known to be malicious are blocked automatically before they reach their destination.
Is the information secure?
Yes. Segment holds ISO 27001, ISO 27017 and SOC 2, meets Amendment 13 of Israel’s Privacy Protection Law, and all traffic on the platform is monitored 24/7 by a SIEM/SOC team. More in our Trust Center.
Does the infrastructure handle high volumes?
Yes. It is built for high traffic and growth, runs with full redundancy and is protected against DDoS and brute-force attacks.
More on the platform
Want to see how it works for you?
In a demo we will look together at your processes and existing systems.