%20Logos%202022/sharetru-white-logo.svg){kind=logo}
Why Sharetru?
Platform
When you're in the Defense Industrial Base, secure file sharing isn’t optional — it’s contract-critical. But standing up a compliant infrastructure to handle CUI or meet DFARS 7012? That's months of work, hundreds of controls, and potentially high costs.
That’s why Sharetru exists.
We’re a FedRAMP Moderate Authorized Service Offering through the Joint Authorization Board (JAB) — meaning you can inherit our controls, skip the stack, and get compliant fast.
CMMC Advanced?
Covered.
DFARS 252.204-7012?
Covered.
NIST SP 800-171?
Covered.
Body of Evidence? Not needed — just reference the Package ID.
“Our prime contractor was already pushing CMMC controls down on us — even though we technically weren’t required to comply yet. We showed the FedRAMP Package ID for our file sharing and transfer system, passed that section of the audit, and moved forward without delay.”
You don’t need a security army to meet CMMC Advanced for File Sharing — you just need Sharetru. We’ve spent 20+ years building a platform designed for regulated industries, and now we’ve put it all behind a FedRAMP Moderate JAB authorization so you don’t have to.
Problem: Defense contractors must share CUI with prime contractors, subcontractors, and government agencies, but most file-sharing methods fall short when it comes to compliance and auditability.
Solution: Sharetru delivers:
Problem: You’re being told to implement 110+ controls… but you don’t have an army of IT staff.
Solution: Sharetru satisfies the cybersecurity requirements under DFARS 252.204-7012, including:
Problem: You’re asked to show compliance before the contract is even awarded.
Solution: Sharetru arms you with:
Problem: A defense subcontractor needed to share CUI with external partners via HTTPS, SFTP and FTPS, but lacked the ability to enforce access by protocol or restrict by IP — a key requirement during a prime contractor security audit.
Solution: Sharetru enabled secure, compliant file transfers with layered controls tailored to each partner’s access method and security profile.
“Sharetru gave us compliant SFTP and FTPS access with IP and protocol restrictions — no infrastructure to manage, and exactly what our primes needed to see.”
We didn’t need to build anything. Sharetru gave us compliant file movement on Day 1.”
We’re not here to replace GCC or GCC High — and we never will be.
Sharetru is purpose-built to complement your Microsoft environment by filling the gaps in secure file transfer and external sharing workflows. While Microsoft focuses on collaboration, email, and document creation, we focus on the secure movement of sensitive files, especially when compliance and access control are non-negotiable.
“GCC High is our system of record. Sharetru is our system of transfer. The two work in harmony — and we finally have confidence that our CUI exchanges are compliant.”
| Challenge | Microsoft GCC/GCC High | Sharetru |
|---|---|---|
| External Sharing | Complex permissions, high risk |
Designed for secure file exchange across orgs
|
| Audit-Ready Logs | Disparate, not always exportable |
Centralized, immutable logging & reporting
|
| User Management | Limited external control |
Fine-tuned access, roles, and notifications
|
| FedRAMP-Covered File Transfer | Not FedRAMP without extensive configuration |
JAB-Authorized file movement & storage
|
| SIEM & IAM Integration | Native, but focused on O365 data |
Works with Microsoft Sentinel & Entra ID
|
“We kept GCC High for email and document editing, but we needed a compliant file exchange platform. Sharetru handles our secure file transfers—without the admin chaos.”
No rip-and-replace. Sharetru slots directly into your Microsoft security architecture:
Stream real-time syslogs and file activity into your existing SIEM with full security event correlation.
Federate access management and SSO with your Microsoft identity provider.
“Being able to integrate Sharetru into Sentinel and Entra ID was huge. We didn’t have to change anything upstream for internal users—just got better visibility and tighter access control.”
You don’t need to build a security stack. You just need to transfer files the right way.