How do you automate the processing of highly sensitive documents?

UNI FORCE, a German professional services firm providing tax, legal, and financial consulting services to healthcare organizations, connected Tresorit SecureCloud to its existing document ecosystem using the S3-compatible API.

As a result, manual file transfers between systems are no longer required. Documents move automatically from the client portal into encrypted storage, while UNI FORCE's AI agents carry out defined processing steps as part of the workflow.

"Our priority was to improve process quality and advance automation. Previous workflows involving various interim solutions were unnecessarily complex and required extensive controls," explains André Eger, owner of UNI FORCE.

Why manual file transfers break the automation chain?

Because automation stops when two systems cannot exchange data directly. At UNI FORCE, this gap had previously been bridged by a manual file transfer.

Clients uploaded documents through authenticated links to a third-party system. Employees then had to download each file and upload it again to Tresorit so internal teams could work with it. Encryption was already in place — the challenge was moving files manually between two systems that could not exchange them directly.

This handoff consumed time, required additional verification, and created opportunities for human error. As more processes became automated, the manual transfer increasingly became a bottleneck. End-to-end automation is difficult to achieve when files still have to be moved manually in the middle of the workflow.

"We evaluated various approaches to automate the workflow. Many of them proved difficult to manage," says André.

How can Tresorit be integrated into existing systems?

Through the S3-compatible Tresorit API. UNI FORCE integrated the API into its existing document environment, replacing manual file transfers with a direct system-to-system connection.

The key difference is where the handoff takes place. Previously, it happened on an employee’s computer: someone had to retrieve a file from one system and upload it to another. Today, the handoff takes place through the integration itself. Systems that support the S3 protocol can transfer files to and from Tresorit, using assigned permissions and without manual intervention.

This created the foundation for further automation. UNI FORCE’s AI agents now operate at this connection point, working with documents as they move between the systems.

Where does the AI processing take place?

Not within Tresorit.

The AI agents belong to UNI FORCE and run within the consulting firm's own environment. Tresorit provides encrypted storage and the API connection layer, nothing more.

Tresorit does not scan files, analyze content, or use customer data to train AI models. Which AI systems are connected and how they process retrieved files is entirely determined by the customer.

How does the process work?

    • Upload
      Clients upload documents through the customer portal.
    • Transfer
      Files are transferred automatically between systems via the S3-compatible API. UNI FORCE’s AI agents assemble the required document packages.
    • Processing
      The AI agents execute predefined processing steps.
    • Verification
      The agents verify that each processing step has completed successfully and notify the responsible employees when necessary.
    • Documentation
      The completed process is logged and documented.

Why did UNI FORCE choose Tresorit?

Because Tresorit SecureCloud enables automation without compromising confidentiality.

Documents are encrypted on the users’ device before upload and remain encrypted in storage. Only authorized users can decrypt and access them. Tresorit itself cannot decrypt the content because it does not possess the encryption keys. This is the principle behind zero-knowledge architecture.

Tresorit’s European roots and strong data protection standards were also important to UNI FORCE, aligning with its requirements for handling highly confidential tax, legal, financial, and healthcare information.

Importantly, encryption and access controls are building blocks of GDPR compliance, not a guarantee of it. Compliance also depends on an organization’s processes, policies, and governance — not on any single product.

What changed as a result?

Manual transfers between systems have been eliminated. Documents submitted through the client portal are automatically stored in encrypted storage without requiring anyone to download and re-upload them.

The verification effort associated with those transfers has also been removed. UNI FORCE's AI agents automatically determine whether processing steps have been completed successfully and record the outcome.

For UNI FORCE, this means fewer manual controls and fewer opportunities for error. The integration is also reusable. Additional AI-powered workflows can connect to the same encrypted storage layer without compromising encryption.

As a result, UNI FORCE has done more than replace a manual process. The company has established the foundation for future automation initiatives.

FAQ

The S3-compatible Tresorit API allows organizations to connect Tresorit SecureCloud's encrypted storage to existing applications. Systems that support the S3 protocol can store and retrieve files directly instead of relying on manual file transfers.

For more information, including technical documentation, see the API documentation on GitHub. 

Through the S3-compatible API. Common use cases include automated uploads, file transfers between systems, and integration into existing document workflows, such as UNI FORCE's connection to its client portal.

Yes. AI agents can access files through the API when they have the appropriate permissions. The agents operate within the customer's environment, not within Tresorit.

No. Due to its zero-knowledge architecture, Tresorit cannot view file contents. Files are not scanned, analyzed, or used to train AI models.

Within the customer's own environment. In the case of UNI FORCE, the company operates its AI agents independently while Tresorit provides the storage and connectivity layer.

Files stored in Tresorit remain end-to-end encrypted. Any actions performed on files after retrieval by a connected system are the responsibility of the customer.

Tresorit provides end-to-end encryption, granular access controls, audit logging, and data residency options. These capabilities support compliance but do not replace organizational compliance processes.