The Secure Trusted Upload Facility (STUF) is designed to provide a trusted, secure mechanism for receiving confidential files from project participants. It addresses the critical need for organizations to collect sensitive information while maintaining the highest standards of security, privacy, and trust.
The core concept is that a Trust Architect (TA) can create a STUF service that can be either Pyx-hosted or self-hosted (off the Pyx network). TAs can use the Pyx-hosted version as a reference implementation and then self-host their own instance if desired, or simply continue using the Pyx-hosted service (as appropriate for the security requirements and posture of the project).
-
Security by Design: Every aspect of STUF is built with security as the primary consideration, from authentication to storage.
-
Trust Through Transparency: The "code under glass" approach ensures complete visibility into the system's operation, building trust through transparency rather than obscurity.
-
Flexibility in Deployment: Organizations can choose the deployment model that best fits their security requirements and risk posture, from fully managed (Pyx-hosted) to completely self-hosted. Different projects have different security needs, and it's part of the TA's responsibility to select the appropriate deployment model.
-
Seamless Integration: Deep integration with Zulip provides a familiar, powerful interface for managing uploads and notifications.
-
User-Centric Experience: Simple, intuitive interfaces make secure file uploads accessible to all users, regardless of technical expertise.
-
Trust Architects create a STUF instance with a unique, memorable URL (e.g.,
<ta-chosen-name>.<community-name>.stuf.pyx.io) -
Project participants receive emails with "magic links" to the STUF site
-
Participants authenticate using:
- Their email address
- A one-time password (OTP) sent to their mobile device
-
Authenticated participants can:
- Upload files with required metadata (ownership, license, etc.)
- View a history of who uploaded what and when (but cannot download files)
- Return to the site via bookmark, remembered URL, or a new magic link
-
Trust Architects have access to an admin tool for:
- Accessing uploaded files
- Configuring project participant access
- Sending/resending magic link emails
- Configuring metadata requirements for uploads
| Feature | Description | Priority |
|---|---|---|
| Magic Link + OTP Authentication | Email magic links and SMS OTP verification for secure access | High |
| Secure File Storage | Encrypted storage in AWS S3 buckets or Azure storage accounts with access controls | High |
| TA Admin Interface | Configuration of authorized users, metadata requirements, and storage settings | High |
| Upload Notifications | Real-time notifications in Zulip when files are uploaded | High |
| Pyx-hosted Deployment | Fully managed deployment option on Pyx infrastructure with custom subdomains | High |
| Upload History | View of who uploaded what and when for all authorized users | High |
| Metadata Collection | Configurable metadata requirements for uploads (ownership, license, etc.) | High |
| Feature | Description | Priority |
|---|---|---|
| Self-hosted Deployment | Support for customer-managed infrastructure with migration path from Pyx-hosted | High |
| Custom Branding | Ability to customize the upload interface with organization branding | Medium |
| Advanced File Validation | Content validation, virus scanning, and file type restrictions | Medium |
| Comprehensive Audit Logging | Detailed logging of all system activities for compliance | Medium |
| User Management API | Programmatic management of authorized users and magic link distribution | Medium |
| Automated Data Handling | Configurable workflows for processing uploaded files | Medium |
| Feature | Description | Priority |
|---|---|---|
| Multi-cloud Support | Expanded support for additional cloud providers | Medium |
| Advanced Analytics | Insights into upload patterns and system usage | Low |
| Workflow Integration | Integration with document processing workflows | Medium |
| Compliance Packages | Pre-configured settings for various compliance requirements | Medium |
| Mobile Application | Native mobile applications for secure uploads | Low |
| Offline Support | Support for uploads in disconnected environments | Low |
Profile: Security-focused professional responsible for establishing secure communication channels with project participants.
Goals:
- Create secure environments for receiving sensitive files
- Ensure compliance with security policies and regulations
- Monitor upload activities and manage access
- Configure metadata requirements for uploads
Pain Points:
- Complex setup processes for secure file transfer systems
- Lack of visibility into system security
- Difficulty managing authorized users
- Need for both hosted and self-hosted options
STUF Benefits:
- Simple configuration through familiar Zulip interface
- Complete transparency with "code under glass" approach
- Flexible deployment options to match varying project security requirements
- Comprehensive admin tools for managing participants and uploads
Profile: External collaborator who needs to share sensitive information with the organization.
Goals:
- Securely share confidential files
- Simple, straightforward upload process
- Confirmation that files were received
- Maintain a record of what they've uploaded
Pain Points:
- Complicated security procedures
- Uncertainty about file delivery
- Concerns about data privacy
- Difficulty returning to upload sites
STUF Benefits:
- Simple, intuitive upload interface
- Strong security with minimal user burden (magic links + OTP)
- Clear confirmation of successful uploads
- Persistent access via memorable URLs and bookmarks
- Visible upload history
Profile: IT professional responsible for managing and maintaining systems.
Goals:
- Ensure system reliability and security
- Minimize maintenance overhead
- Support organizational compliance requirements
Pain Points:
- Complex deployment and update processes
- Limited visibility into system operation
- Difficulty troubleshooting issues
STUF Benefits:
- Well-documented deployment options
- Transparent operation with comprehensive logging
- Simplified management through Zulip integration
The success of the STUF system will be measured by:
-
Security Effectiveness:
- Zero security incidents related to file uploads
- Successful completion of security audits
- Proper implementation of two-factor authentication (email + SMS)
-
User Adoption:
- Percentage of eligible users successfully uploading files
- User satisfaction ratings for the upload experience
- Frequency of return visits using bookmarked URLs
-
Operational Efficiency:
- Time required to set up new STUF instances
- Administrative overhead for managing the system
- Successful migrations from Pyx-hosted to self-hosted instances
-
Trust and Transparency:
- Trust Architect satisfaction with system visibility
- Compliance with transparency requirements
- Quality of metadata collected with uploads
Behind the scenes, STUF is built on:
- Cloud Storage: AWS S3 buckets or Azure storage accounts for secure file storage
- Authentication System: Email magic links + SMS OTP for two-factor authentication
- Admin Interface: Web-based tools for Trust Architects to manage the system
- API Layer: Secure APIs for integration with other systems
- Configurable Metadata: Flexible schema for capturing required information with uploads
The Secure Trusted Upload Facility represents a new approach to secure file transfers, combining robust security with unprecedented transparency and ease of use. By following this roadmap, we will deliver a solution that not only meets the immediate needs for secure file uploads but also establishes a foundation for future enhancements and integrations.
The flexibility of deployment options—from fully Pyx-hosted to completely self-hosted—ensures that Trust Architects can select the approach that best fits each project's specific security requirements and risk posture. This flexibility is not merely for convenience but is essential for properly addressing the varying security needs across different projects. The intuitive user experience makes secure file uploads accessible to all project participants while maintaining appropriate security controls.