No emailed download links
Recipients don’t dig through an inbox for a forwardable URL. They sign in, see available downloads in the desktop console, and pull the package under the access policy you set — not under whoever happens to have the email.
Security for deadline delivery
Security built for delivery nights — not casual share links
TeraAirlift is a desktop transfer operations console: controlled recipients, short-lived storage access, SHA-256 integrity on the way out and the way in, and encryption in transit and at rest — without making emailed download links the center of your handoff.
Why emailed download links fail under pressure
A link in an email is easy to send — and easy to forward to the wrong person, leave open after the review window, or lose track of entirely when three packages leave the same suite before morning. Ops needs a clearer answer than “someone got an email.” Security needs access that expires, identity that maps to a recipient, and proof the bits that arrived are the bits that left.
What teams actually get
Plain-language outcomes for delivery leads — the same controls IT will ask about on the next call.
SHA-256 integrity end to end
Each file is hashed before upload. The API validates the blob hash when the transfer completes. The receiver re-hashes after download. A mismatch fails closed — the file is removed, not silently accepted into tomorrow’s review.
Delivery and download verification
Treat handoff as an operations job: session status, delivery lifecycle, and download confirmation so someone owns the question “did the intended package arrive intact?” before the client call starts.
Encrypted in transit and at rest
Upload and download traffic uses TLS. Objects sit in cloud storage with the provider’s encryption-at-rest defaults. We don’t invent exotic crypto theater — we use the controls your infrastructure team already expects.
Short-lived storage access
Presigned URLs and SAS tokens expire quickly. Blob credentials never persist in the desktop client’s settings or credential store — only in memory for the active transfer.
Policy enforced server-side
Recipient match, link expiration, and access mode are enforced by the API — not an honor system on a public link. Microsoft Entra ID is the enterprise identity path for organization-backed sign-in.
Integrity before the review call — not after.
How integrity and access work
A short path ops and IT can share internally — without a feature matrix or absolute speed claims.
- 1
Hash before the bits move
The client computes SHA-256 for each file as the transfer session is created, so integrity is part of the job from the first request — not an afterthought.
- 2
Direct data-plane upload
Bytes go straight to object storage via short-lived upload credentials. The control-plane API orchestrates policy and metadata; it does not proxy the multi-terabyte payload.
- 3
Completion validates the blob
When the client marks the transfer complete, the API checks size and content hash against what was declared. A bad object does not become a successful delivery.
- 4
Recipient downloads in-app
Available downloads surface for the authenticated recipient. No primary workflow of “email me a magic link and hope it isn’t forwarded.”
- 5
Re-verify on the way in
After download, the client hashes again and compares to the API-provided digest. Mismatch fails closed so a corrupted package never quietly enters the next stage of the pipeline.
What we don’t claim
Credible security copy leaves room for honesty. These boundaries keep marketing, sales, and IT aligned.
- We do not claim SOC 2 or ISO certification on this page.
- We do not claim end-to-end encryption beyond TLS in transit and cloud-provider encryption at rest — unless a specific deployment confirms additional controls.
- We do not publish absolute uptime SLAs or “uncrackable” security language.
- Optional anonymous link modes may exist for some workflows; the security story we lead with is authenticated, policy-bound delivery — not casual email links.
Schedule a Demo
Tell us about your file transfer workflow and we’ll follow up to schedule a product demo tailored to your team.