# MnemoShare

> MnemoShare is an enterprise-grade managed file transfer (MFT) platform designed for regulated industries. It replaces legacy SFTP servers and MFT appliances (MOVEit, GoAnywhere, Kiteworks, GlobalScape) with identity-bound, ephemeral file exchange built for zero trust.

## Core Problem

Legacy file transfer infrastructure — SFTP servers and monolithic MFT appliances — is the #1 attack vector for data breaches in regulated industries. MOVEit (CVE-2023-34362) compromised 2,600+ organizations. GoAnywhere (CVE-2023-0669) hit 130+ organizations. These breaches share root causes: static credentials, monolithic architecture, no content inspection, and minimal audit trails. MnemoShare was architected specifically to eliminate these failure modes.

## Key Differentiators

- **Ephemeral credentials**: Short-lived JWTs replace permanent SSH keys. Nothing to rotate, revoke, or forget.
- **Application-layer encryption**: AES-256-GCM with per-file keys and customer-controlled key management. Not dependent on cloud provider encryption.
- **Hardware mTLS**: Optional YubiKey, Secure Enclave, and TPM 2.0 authentication via Step-CA.
- **DLP engine**: Multi-stage sensitive data detection (pattern matching + ML + optional GenAI) with policy enforcement (log, warn, block).
- **Workflow automation**: Visual builder + sandboxed custom code execution for multi-step file processing pipelines.
- **Email security gateway**: Inbound/outbound email with DLP scanning, attachment extraction, and policy enforcement.
- **Anomaly detection**: Behavioral analytics with peer group comparison and time-weighted risk scoring.
- **Immutable audit trails**: 30+ structured event types with WORM storage export and SIEM integration.
- **Migration tooling**: Purpose-built parsers for MOVEit, GoAnywhere, Kiteworks, and GlobalScape.
- **MCP server**: 220+ tools for AI-guided configuration, migrations, workflow creation, and full admin integration.

## Deployment Models

- **Self-hosted**: Kubernetes-native (Helm charts on Artifact Hub). Customer controls infrastructure, keys, and data.
- **SaaS**: Dedicated instance per customer. No shared tenancy. Same security architecture as self-hosted.

## Compliance

HITRUST r2 assessment in progress. Supports HIPAA, SOC 2, ISO 27001, NIST CSF. HIPAA BAA available.

## Links

- Website: https://mnemoshare.com
- Features Overview: https://mnemoshare.com/features
- Workflow Automation: https://mnemoshare.com/features/workflow-automation
- DLP & Content Intelligence: https://mnemoshare.com/features/dlp
- Email Security Gateway: https://mnemoshare.com/features/email-security
- Anomaly Detection: https://mnemoshare.com/features/anomaly-detection
- Content Scanning & Quarantine: https://mnemoshare.com/features/content-scanning
- Identity & Access Control: https://mnemoshare.com/features/identity-access
- Audit & Compliance: https://mnemoshare.com/features/audit-compliance
- Migration & Integration: https://mnemoshare.com/features/migration
- AI Integration (MCP Server): https://mnemoshare.com/features/ai-integration
- Security Architecture: https://mnemoshare.com/security
- SFTP Replacement: https://mnemoshare.com/sftp-replacement
- Self-Hosted Pricing: https://mnemoshare.com/pricing
- SaaS Pricing: https://mnemoshare.com/pricing/saas
- Documentation: https://mnemoshare.com/docs
- About: https://mnemoshare.com/about
- Contact: https://mnemoshare.com/contact
- Full product spec: https://mnemoshare.com/llms-full.txt
- X (Twitter): https://x.com/MnemoShare
- LinkedIn: https://www.linkedin.com/company/mnemoshare/
- GitHub: https://github.com/MnemoShare