Smarsh, a provider of e-mail archiving and compliance solutions, has announced the addition of file encryption to its solution platform. Clients can securely upload files to be encrypted on portable media devices, alongside messages from their electronic messaging archive, satisfying recent amendments to the Financial Industry Regulatory Authority  under Rule 8210.

Rule 8210 gives FINRA staff the authority to compel registered firms to produce documents, provide testimony or supply written responses or electronic data in connection with an investigation, complaint, examination or adjudicatory proceeding. Responses to requests from FINRA frequently require the use of physical electronic media because of the size and format of files.

As outlined in Regulatory Notice 10-59, which took effect Dec. 29, 2010, the amendments mandate that organizations apply encryption when sending electronic documents to FINRA via portable media devices, such as CDs, DVDs, USB drives or portable hard drives. To ensure adequate protection of the data, which may include sensitive personal information, firms must meet industry standards for strong encryption (256-bit or higher) and provide FINRA staff with the confidential process or key to decrypt in a communication separate from the encrypted portable media device.

“FINRA has signaled that the protection of sensitive investor data needs to be a priority for registered firms,” said Stephen Marsh, Smarsh founder and CEO. “Smarsh clients are already encrypting email and messages that are exported to portable media devices within the Smarsh Management Console, so extending the service to other documents and file types was a logical next step. Now, rather than having to implement new systems or tie up IT resources to comply with Rule 8210 encryption requirements, firms can simplify their procedures with one solution and have peace of mind in meeting this compliance obligation.”

Smarsh clients have a single interface to upload and encrypt files (such as documents, databases, audio, etc.), as well as emails and other electronic communications from their archive, onto portable media devices. After securely uploading requested documents within the Smarsh Management Console, clients can choose their preferred encryption method, and then export these files to a portable media device or have Smarsh specialists handle the task. The process automatically ensures that decryption information is sent to FINRA in a communication separate from the data itself, and all related activity is logged and preserved within the system.

Smarsh clients can also transfer files digitally through the smarshEncrypt secure messaging platform.