for healthcare Secure, HIPAA-compliant file sharing & data storage with mobile data access Safeguard protected health information (PHI), support regulatory compliance and mobilize data access with Citrix. Share, store, sync and secure data on any device Citrix ShareFile is a secure data sync and sharing service that allows IT to mobilize all enterprise data and empower user productivity anywhere. ShareFile gives healthcare organizations a choice of where data is stored on premises, in a dedicated healthcare cloud or a combination to meet specific data sovereignty, compliance and performance requirements. IT can provide instant mobile access to data, including information on existing network drives, SharePoint sites, OneDrive for Business and enterprise content management systems. ShareFile carries Sword & Shield s HIPAA Compliant Seal of Approval making it easier for your organization to support large file management and third party sharing of data to comply with HIPAA standards. Control how data is accessed, stored and shared with Citrix ShareFile, an industry-recognized, IT-approved market leader: Secure IT Oversight Dedicated Healthcare Cloud Mobile Data Access Safeguard PHI and maintain HIPAA compliance Send & receive files securely IT control plus data & device security Security for patient data For added patient data Mobility and productivity Organizations can enable true Mobilize enterprise data wherever it s stored IT can define the right level of data access and sharing for security, organizations can use a private enclave, ShareFile mobile productivity and enable instant access to data Collaborate, share data and work productively anywhere Mobilize access to corporate data and personalized desktops each user, with full visibility and control: Authentication of and authorization over file sync Cloud for Healthcare: A dedicated, secure storage space within a private cloud where customers PHI is on existing network drives, SharePoint and ECM systems: Provides secure large file management and real-time and sharing privileges. processed and stored in collaboration. Granular access controls SSAE 16 Type II accredited Delivers desktop and mobile and security policies for both datacenters. access to data from anywhere employees and third-party users. Technically compliant with the and syncs information across Advanced device security HIPAA Omnibus Final Rule. all devices. (encryption, remote wipe, Compliant to the HIPAA Puts data securely in the poison pill, data expiration, Security Standards for the hands of teams while in passcode lock and disabling Protection of Electronic the office, at the hospital, of external apps) to keep PHI Protected Health Information with a patient and even safe on any device. and the Health Information provides offline access and Support for privacy and Technology for Economic and editing capabilities. compliance with robust Clinical Health (HITECH) Act. reporting and auditing. 1
How healthcare organizations are using enterprise file sync & sharing Top use cases include safe and secure exchange of PHI and mobilizing data access for improved clinical collaboration and productivity Securely store and share files Exchange files, both internally and externally, to limit data leakage Go paperless get 4X cost savings by uploading patient records via ShareFile Solve the Dropbox problem and other data security issues with personal file sharing services Safeguarding PHI is a major priority for healthcare organizations. Many are turning to secure, healthcare-specific, cloud-based IT solutions that comply with HIPAA requirements and reduce the risk associated with a breach of PHI. Many healthcare IT teams are deploying enterprise-grade file sync and sharing tools to address security of patient records. With, healthcare organizations can solve these data-related business challenges and more: Comply with HIPAA requirements. Reduce the risks of PHI data breaches. Increase IT visibility and control/reporting. Provide access to comprehensive healthcare data from anywhere, on any device. Increase mobile productivity with access to enterprise data. Enable healthcare professionals to securely share data with third parties (payors, suppliers, regulators). Enhance management of large files. Facilitate real-time collaboration. Top use cases Healthcare organizations are gaining these benefits from using : For safe and secure PHI exchange with external entities to protect patient data-send and receive confidential files with encryption to maintain HIPAA compliance. Provide mobile access to department network drives, SharePoint and other business data for enhanced productivity and a single point of access to all data sources. Clinician-to-clinician data sharing to save time, enhance case management and increase collaboration. Share confidential files before meetings and specialist case reviews increase productivity for all teams. Utilize shared folders to collect nurses notes for smoother transition across shifts. Deliver educational content for patients and families via secure patient portals. Caregivers can access, sync and securely share files within their delivery network and with ancillary providers. Clinical staff can send discharge instructions and wellness resources to patients and track download statistics. Offline access and integration with email simplify secure file sharing and provide flexibility for clinicians. Instant access to the most recent clinical data, hospital protocols and procedures provides the user with the most accurate information to make critical decisions. Access to the latest versions of training materials for new interns and affiliates for improved onboarding. Quicker response times for lab results, research and clinical test results. Allow remote healthcare workers offline access to data for telemedicine. Reduce paper costs by digitizing the employee onboarding and patient screening processes. Provide large file access to physician presentations for medical schools no more printing of large binders or handouts. 2
key features Next generation workspace Feature Function Benefit ShareFile workspaces Internal and external file sharing Send files to anyone from within or outside the organization Quickly and easily send and receive files with added security. Large file sharing Send files up to 100GB No more file size limitations. Secure FTP replacement, no longer share large amounts of data via USB drives. Mobile & web app editing with Microsoft Office Online Mobile apps Multi-language support Custom branding Open and edit files stored in ShareFile and without desktop versions of Microsoft Office Accessing data from any device including: iphones, ipads, Android Phones, Android Tablets, Windows Phones, Chromebooks and BlackBerry devices User interface is offered in different languages including: English, French, German, Spanish, Japanese, Korean, Simplified Chinese, Russian, Dutch and Portuguese. Companies have the ability to custom brand the service. Enables quick and easy collaboration from any browser, computer or mobile devices, saving time and increasing productivity. Securely access data from mobile devices. Support for multiple devices to meet each company s specific needs. Allows for multi-language support for organizations worldwide. Highlight your brand front and center; make a great impression with clients. File checking/checkout Allows users to lock a file while making changes Supports collaboration scenarios. Mobile access and productivity Distribute content via different mobile devices Securely view and edit content in home directories, file shares, SharePoint, OneDrive without VPN as a single point of access. Advanced workflows ShareFile sync Device sync On-demand sync Plug-in Attachment conversion Overcome file size restrictions Better control and visibility StorageZones Flexibility to store data where you choose Encrypt data with private keys Workflow control options include: Podio, RightSignature and ShareConnect Syncing files across all devices including: PCs, Macs, tablets, and mobile phones On-demand sync capability is built into the ShareFile Sync Tool for Windows Integration with Microsoft Outlook converts attachments into links Eliminates attachment size restrictions for sending large files Track use of sensitive data by requiring a login to access the files Choose between customer-managed (on-prem) and Citrix-managed StorageZones Files and metadata are encrypted with customer-owned keys Delivers a single solution that goes beyond addressing mobility needs, but also supports requirements that drive workflows. Provides a collaborative workspace where anyone can securely exchange, track, edit and e-sign content with unlimited cloud storage. IT can limit access to sync feature for specific users. The sync tool automatically updates to incorporate the newest capabilities available; the sync clients also integrate into Windows Explorer and Mac Finder. Optimized for use with virtual apps and desktops, including those powered by XenApp and XenDesktop. Users are able to view all their files and folders as if they reside within the virtual desktop; however, the file will download and sync only when users want to view, edit, save or share, helping IT cut storage costs and optimize performance. Simplifies large file sharing both within and outside the organization. Users can convert all attachments into links by default; specify minimum file size for conversion or device on a per email basis. Eliminates file size restrictions and potential bounce-back from the receiver s email service. Users can also request files from co-workers or third parties by providing a link where the other party can upload attachments. Users have the ability to track sensitive data. Senders can also request a download notification and prescribe an expiration policy on the file/files after which they will be no longer available to the recipient. StorageZones feature gives IT the flexibility and option to choose between customer-managed (on-prem) and Citrix-managed StorageZones. Enables businesses to manage their own StorageZones. 3
Security and compliance Restricted StorageZones (private data areas) is an option for custom-managed StorageZones Provides increased data security and compliance. Files and metadata in a Restricted StorageZone are encrypted with the customer s keys for zeroknowledge vendor visibility, plus file sharing/access is exclusive and limited to specified internal users who must pass a dual authentication process. Geographic locations Storing data in close proximity Enhances performance for the users. A single ShareFile account can span multiple StorageZones locations worldwide, enabling optimized performance for global performance. Customer-managed StorageZones cloud options Customer-managed StorageZones on-premises options StorageZone connectors StorageZone connectors for network shares and SharePoint Office 365 connectors Personal cloud connectors Mobile access Support for mobile phones and tablets Deployed in Microsoft Azure or Amazon Web Services (AWS) Integrates with an organization s existing infrastructure Mobile access to data stored in existing corporate network shares Access to SharePoint Online and OneDrive for Business Extend businesses data strategy to include third-party access to Box, Dropbox, Google Drive and OneDrive using Connectors. Access to critical data through mobile devices that ShareFile supports: Apple iphone, Android, and Windows 8 phones and ipad, Android tablets and Chromebook; ShareFile apps are specifically designed to provide a brilliant and intuitive experience on these devices Full support for data storage in Amaon S3. These deployment options provide all the elasticity and cost benefits of the cloud, together with security and control of customer management to their corporate encryption keys an advantage typically only available on-premises. Customer-managed StorageZones can be easily integrated with an organization s existing infrastructure as it is designed to support any CIFSbased network share, S3 object storage, and customer-owned object storage. Eliminates the need for massive data migration, extends the benefits of mobile file sync and sharing services to existing network shares and SharePoint, enhances workforce productivity. Users have the ability to edit files using the built-in content editor and share files. Enables secure mobile access and editing for documents stored in SharePoint Online and OneDrive for Business IT can choose to enable this feature for a defined period and require users to migrate all corporate data from personal file sharing services to ShareFile or for communicating with third parties that have standardized on a different file sync and sharing service. Enables mobile workstyles by giving users access to critical data on a variety of mobile devices. Built-in mobile content editor Edit documents through ShareFile Create, review, and edit Microsoft Office documents within the ShareFile app. Offline access Save files locally Enables offline access and editing from mobile devices. Enterprise directory integration Two options Integrates AD and XenMobile Offers support for Active Directory integration via SAML or XenMobile SAML 2.0 provider Integration for Identity Providers (IDP s) ShareFile supports Form-Based authentication, providing a consistent SSO log-in experience across all devices, the ShareFile website and the Plug-in for Microsoft Outlook. XenMobile Integrations Enterprise Directory Integration Simplifies and accelerates role-based provisioning and deprovisioning of the service. Secure IT oversight Feature Function Benefit Reporting, auditing and control Enterprise ready service Complex security, integrations, reporting and admin rights ShareFile offers complex security/compliance, SSO/AD integration, audit/ reporting, IT control, policies and controls and admin rights. End user and IT reporting Receive report file sharing activity Provides IT comprehensive capabilities to track, log and report on user file access, sync and sharing activity, including the date, type, place, and network address of each user event. 4
Access control policies Custom configured access Limited download-only access or in addition to downloading, a user can be granted a combination of upload/edit/delete and admin access to folders. Storage quotas Device security policies Enterprise admins can set StorageZone quotas on My Files and Folders Gives IT increased visibility and control over the amount of storage each individual user can consume. Remote wipe Wipe all ShareFile stored data and passwords Allows both users and IT to wipe ShareFile stored data and passwords on mobile device in case of loss or theft. Alternatively, IT can lock the device to restrict its use for a limited time. Poison pill Prescribe data expiration policies Enables IT to prescribe data expiration policies for mobile devices and activate audit controls to track user logging activity. Restrict modified devices Restrict use of devices IT can restrict the use of modified or jailbroken devices. Restrict third party apps Restrict use of third party apps that can store copies of sensitive data Provides build-in capabilities like a mobile content editor as a secure alternative. Passcode lock Require users to enter a passcode IT has the ability to require users to enter a passcode every time the user wants to access their ShareFile account on a mobile device, making it easier for users to access their data while ensuring unauthorized access is denied. Data security Secure file sync and share Sharing files securely Solve your company s Dropbox problem (unauthorized use of personal file sharing accounts) with ShareFile, a secure alternative to personal file sharing services. Storage and in-transit encryption Transferring files through ShareFile Ensuring files are shared over a secure SSL/TILS connection and stored at rest with AES 256-bit encryption. Mobile device encryption Enforces encryption on mobile devices IT can leverage the mobile device s encryption capabilities and enforce encryption for all ShareFile data on the device. Compliance Data Loss Prevention (DLP) systems integration Read-only/view-only sharing PCI-DSS and HIPAA compliant (HIPAA Compliant Seal of Approval from Sword & Shield) Integrates with McAfee DLP prevent, Websense TRITON AP-DATA, RSA Data Loss Prevention and others for customer-managed StorageZones deployment Securely share sensitive documents with others with read-only restrictions Citrix implements and maintains commercially reasonable and appropriate physical, technical and organizational complimentary controls to protect customer data. ShareFile also offers a ShareFile Cloud for Healthcare a secure enclave within a private cloud where IT can upload, store and share patient health information (PHI). Restricts document sharing based on the file s DLP classification. Connecting ShareFile with customer s existing DLP system enables the ability to classify files based on their content to enforce sharing restrictions per company policy. Users can share read-only documents in cases when preventing other members from adding, editing, or deleting files is required. Multi-tenancy Hosting ShareFile data for clients Service providers can host ShareFile data for their clients in their own data centers with ShareFile multi-tenant StorageZone capabilities. Beneficial to service providers to expand their services footprint and increase customer value. Open and extensible platform API Platform to request data Citrix ShareFile v3 API platform allows users to utilize the API to request data and perform actions against a ShareFile account. The API is fully RESTful, utilizing JSON format for request/response protocols and it has implemented a subset ODATA. The ODATA specification will allow developers to extend base requests with Query Parameters to retrieve additional information. This gives developers a powerful tool to leverage ShareFile s file sharing capabilities within their own applications. SDK Connectors Create connections with third-party data sources Allows end users access to files from the data source by navigating, in supported ShareFile clients, to a connector folder, which then authenticates the users to the custom data source. 5
Integrates with what you have today Feature Function Benefit Industry s most comprehensive and seamlessly integrated solutions Managing mobile apps, data and devices with ShareFile and XenMobile Enables IT-managed mobile apps to intelligently interoperate with ShareFile to open, edit, sync and share data, all within a secure container. Single sign-on and federated identity Enterprise directory integration with XenMobile Simplifies and accelerates role-based provisioning and deprovisioning of the follow-me data service. It enforces two-factor authentication with NetScaler Gateway and helps monitor service levels and license usage. Complete mobile device management Manage and configure corporate and personal devices IT manages and configures corporate and personally owned devices, including app blacklist/whitelists, full or selective device wipe, and enterprise integrations via LDAP and PKI. Plus, XenMobile offers over sixty security policies to manage and control apps and data. Mobile app containers Personal apps run in a separate vault Isolates them from mobile enterprise apps and data. WorxMail integration Attachments open in ShareFile Enables users to attach files from their ShareFile repository without requiring that the file be downloaded to the device. Citrix provides SSO experience from the WorxMail client into ShareFile when attaching documents to e-mails, removing the need for users to log into ShareFile during the workflow. Citrix product integrations ShareFile integrates with XenMobile, XenApp, XenDesktop, Citrix Workspace Cloud, Citrix Workspace Suite Enabling an all-in-one solution suited for any workplace environment. About Citrix Citrix (NASDAQ:CTXS) is leading the transition to software-defining the workplace, uniting virtualization, mobility management, networking and SaaS solutions to enable new ways for businesses and people to work better. Citrix solutions power business mobility through secure, mobile workspaces that provide people with instant access to apps, desktops, data and communications on any device, over any network and cloud. With annual revenue in 2014 of $3.14 billion, Citrix solutions are in use at more than 330,000 organizations and by over 100 million users globally. Learn more at www. Copyright 2015 Citrix Systems, Inc. All rights reserved. Citrix, XenMobile, StorageZone, NetScaler Gateway, WorxMail, WorxWeb and ShareFile are trademarks of Citrix Systems, Inc. and/or one of its subsidiaries, and may be registered in the U.S. and other countries. Other product and company names mentioned herein may be trademarks of their respective companies. 1215/PDF 6