Acceptable use & privacy notice

ReganSAFE is operated by Regan Technologies to exchange business files with our customers and partners. By using it you agree to the following.

What may be sent

• Unclassified business information: quotes, statements of work, configurations, logs, documentation, images and similar material.
• Not classified national security information of any level.
• Not Controlled Unclassified Information (CUI), including CUI//SP-PRVCY, ITAR/export-controlled technical data, or material marked FOUO/CUI. Ask your Regan point of contact for the approved channel.
• Nothing you do not have the right to share.

Markings that mean “do not use ReganSAFE”

Open each file and check its header, footer and cover page. If you find any of the following, do not upload it here; your Regan point of contact will tell you the approved channel.

• Classified: TOP SECRET, SECRET, CONFIDENTIAL, TS//SCI, or portion marks (TS), (S), (C) — never, under any circumstances.
• CUI banner and portion markings: CUI, CONTROLLED, CUI//SP-… or CUI//… (for example CUI//SP-PRVCY, CUI//SP-PROPIN, CUI//SP-SSEL, CUI//SP-CTI, CUI//NOFORN, CUI//FEDCON), portion marks (CUI), or a “Controlled by:” designation block.
• Legacy markings now treated as CUI: FOUO, For Official Use Only, U//FOUO, SBU, Sensitive But Unclassified, LES.
• DoD and export control: Distribution Statements B, C, D, E or F; ITAR, EAR or “Export Controlled” warnings; Controlled Technical Information; NOFORN.
• Procurement-sensitive: Source Selection Information (FAR 2.101 and 3.104), bid or proposal information, and government-held documents marked Proprietary.
• Personal information, which is usually CUI: Social Security numbers, dates of birth, medical or financial records, security-clearance details, personnel files.

Every transfer begins with an acknowledgement that the files were checked against this list. The acknowledgement, with the sender's name, e-mail address, IP address and the time, is kept with the transfer record.

How files are handled

• Files are transmitted over TLS, scanned for malware on arrival, and stored encrypted (AES-256). Files that fail scanning are quarantined and never delivered.
• Files are retained for a limited period (normally 7 days) and then permanently deleted. The transfer record — names, sizes, checksums, who sent and received, and when — is retained for audit purposes.
• Access to files you send is limited to the Regan employee the transfer is addressed to, and to system administrators for support and security purposes.

What we record

For every transfer we record the name, e-mail address and organization you provide, your IP address and browser identifier, file names, sizes and SHA-256 checksums, and the time of each upload and download. This record exists so both parties can verify what was exchanged. We do not use tracking cookies or third-party analytics; the only cookie is a session cookie needed to complete your transfer.

Contact

Regan Technologies Corporation, 381 Elden Street, Suite 2300, Herndon, VA 20170. Questions about this service should go to your Regan point of contact.