Pricing | TransferIQ Orchestrate for AWS (BYOC) | Backflipt
Pricing for TransferIQ Orchestrate for AWS
Deploy a secure, customizable BYOC AWS MFT solution with TransferIQ Orchestrate, featuring streamlined orchestration, partner and account management, flexible route configuration, real-time analytics, and integrated certificate management, all running within your AWS environment.
Professional
Ideal for growing enterprises
$999
Per month/Yearly contract
Up to 100
Partner Accounts
- CloudFormation-based AWS MFT optimization
- Advanced container orchestration (ECS/EKS)
- AWS IAM services integration
- Priority support (24/7)
- Advanced monitoring dashboard
- Multi-protocol support (SFTP, FTPS, AS2)
- API access
- Compliance reporting
- High availability configuration
💡 Enterprise integrations available with upgrade
Enterprise
For large-scale operations
Contact Us
for custom pricing
Tailored to your requirements
100+ Partner Accounts
- Enterprise IdM Integration (Okta/Ping)
- 12+ file transformations + custom transformations
- Enterprise container architecture (EKS)
- CloudFormation + Terraform script deployment
- Partner SFTP services with resilient transform methods using AWS MFT connectors
- Dedicated support team
- Custom integrations
- Advanced security features
- Multi-region deployment
- SLA guarantees
- Custom reporting and analytics
- Dedicated customer success manager
- Professional services included
Enterprise Only
Enterprise Add-ons Available:
- 🎫ITSM Integration (ServiceNow)
- 📊Splunk Log Integration
- 🔄TransferIQ Continuous Touch - Automated partner recertification campaigns for certificate renewals and contact validation
- 📈TransferIQ FileView - Real-time SLA monitoring, compliance reporting, and comprehensive file transfer analytics
Why Choose TransferIQ Orchestrate?
- BYOC Architecture - Runs in your AWS environment
- Automated CloudFormation-based infrastructure setup
- Advanced file transformation workflows (3-12+ steps)
- Native AWS IAM integration for security
- Pay only for AWS MFT usage with transparent billing
- AWS MFT connectors for resilient partner SFTP connections
Bring Your Own Cloud (BYOC) Architecture
TransferIQ Orchestrate deploys as a secure container via AWS Marketplace, leveraging ECS/EKS for native Kubernetes orchestration and streamlined scaling.
Complete Data Sovereignty
Your data never leaves your VPC. Secure S3 directory structures with data isolation via bucket policies and least-privilege IAM roles.
Transparent AWS Billing
Pay AWS directly for Transfer Family usage with no markup. See exactly what you're paying for with itemized AWS billing.
High Availability Design
Two instances across separate AZs, fronted by ALB/NLB for failover, with Kubernetes-based scaling via EKS.
Automated Infrastructure
Admin pages enable one-click deployment of CloudFormation scripts (Terraform available for Enterprise) with VPC, IAM, and S3 best practices built-in.
Self-Service Management
Built-in admin pages for partner onboarding, workflow creation, and route/account setup with automated S3 directory access.
Enterprise Monitoring
Integrated CloudWatch monitoring, CloudTrail auditing, Kubernetes-native scaling, and rule-based notifications with Zero Trust/SIEM integration.
How We Compare
| Feature | TransferIQ Orchestrate | GoAnywhere MFT | Cleo Integration Cloud |
|---|---|---|---|
| Infrastructure | Your AWS Cloud (BYOC) | Vendor-hosted or on-premise | Vendor-hosted cloud |
| Data Sovereignty | 100% - Data stays in your VPC | Limited | None |
| File Transformations | 3-12+ steps with custom options | Limited workflow capabilities | Basic transformation features |
| Workflow Automation | 12+ file transformations with no-code workflows | Drag-and-drop project creation with scripting | Content-based routing with transformation features |
| Infrastructure Setup | Automated container deployment (ECS/EKS) | Manual configuration required | Vendor-managed setup |
| Delivery Method | AWS Marketplace (Secure Container) | Traditional software licensing | SaaS platform |
| Security Testing | Aligns with enterprise security CI/CD processes | Standard security practices | Vendor-managed security |
| Admin Interface | Built-in CloudFormation/Terraform deployment | Manual configuration required | Limited customization |
| Pay-per-use Pricing | Yes (AWS direct billing) | No | No |
| Vendor Lock-in | None | High | High |
Frequently Asked Questions
How does BYOC work?
TransferIQ Orchestrate deploys into your AWS account using CloudFormation templates. We configure and manage the AWS MFT service within your VPC, ensuring your data never leaves your environment while providing enterprise-grade management capabilities.
How does container deployment work?
TransferIQ Orchestrate is delivered as a secure container image via AWS Marketplace. Deploy to ECS for managed containers or EKS for full Kubernetes orchestration. The container includes all application binaries, is optimized for minimal attack surface, and supports automatic scaling via Kubernetes or ECS auto-scaling.
What's the difference between CloudFormation and Terraform?
Starter and Professional tiers use CloudFormation scripts for AWS infrastructure deployment. Enterprise customers get access to both CloudFormation and Terraform scripts, providing flexibility for multi-cloud environments and advanced infrastructure-as-code workflows.
What is the shared responsibility model?
TransferIQ maintains the core application, security patches, container images, and CloudFormation/Terraform scripts. You manage your AWS infrastructure (ECS/EKS, VPC, S3), container runtime updates, IAM roles, and compliance configurations. This BYOC model ensures you maintain complete control over your data and infrastructure.
What AWS permissions are required for setup?
The admin pages display the exact IAM permissions needed: VPC/subnet management, security groups, IAM roles, S3 buckets, ECS/EKS clusters, ALB/NLB, AWS Transfer Family, KMS, CloudWatch, and CloudTrail access. Enterprise customers also get Kubernetes RBAC permissions for EKS. All permissions follow least-privilege principles with credential validation built-in.
How is security testing performed?
We employ comprehensive security testing: Static Application Security Testing (SAST) with SonarQube, Software Composition Analysis (SCA) with OWASP Dependency-Check, container vulnerability scanning with Docker Scout/Trivy, Dynamic Application Security Testing (DAST) with OWASP ZAP, and quarterly manual penetration testing by certified ethical hackers.
Can I migrate from GoAnywhere or Cleo?
Yes! We provide migration services and tools to help you transition from existing MFT solutions. Our team will work with you to ensure minimal disruption during the migration process.
Do you offer enterprise discounts?
Yes, we offer volume discounts for large deployments and multi-year commitments. Contact our sales team to discuss custom pricing for your specific requirements.