Explore

Encrypt and Upload Files

Straddle may request your organization to upload files for additional analysis or for a proof of concept of various services.

Payment and sensitive personal data must always be encrypted before it can be shared with Straddle.

Examples of files that can be uploaded include:

Feedback files: Consumer or bank account records that have been scored by Straddle.

POC (Proof of Concept) files and Retro files: Consumer or bank account records that have not been scored by Straddle.

All files must be in CSV format and encrypted using the

Gnu Privacy Guard (GPG)⁠

implementation of the Pretty Good Privacy (PGP) encryption standard before they are uploaded to the Straddle file server.

How it works

⁠

Create a CSV file⁠

⁠

Download your PGP public key⁠

⁠

Encrypt the CSV file with PGP⁠

⁠

Send the encrypted file using SFTP⁠

⁠

Create a CSV file

Compile your data with the required and requested data field types. Save the file in CSV format with the correct naming convention.

For more information on the CSV file requirements for different file types, see the following:

For Feedback files, see Send Feedback Data via CSV File.

For POC and Retro files, contact your Account Manager or review the sample below. The maximum size per file allowed to send is 4 GB.

⁠

File definitions and sample⁠

⁠

Download the Straddle PGP public key

Every data file sent sent to Straddle must be encrypted using the Straddle-provided PGP public key. Do not use any other public keys for encryption.

Straddle provisions you with a public PGP key pair for encryption. You can access the PGP public key in one of the following ways:

Download File

⁠

Straddle Share (EFBC150B) – Public.asc

4.6 kB

⁠

Manual Import

KeyID

5320537CEFBC150B

Key type

RSA

Key size

4096

Fingerprint

481E C813 3631 AA92 70F2 7A0C 5320 537C EFBC 150B

User ID

Straddle Share <dev@straddle.io>

There are no rows in this table

⁠

Encrypt the CSV file with PGP

Do not sign the file before or after encryption.

The file encryption process in this section uses the

Gnu Privacy Guard (GPG)⁠

implementation of the PGP encryption standard. To encrypt your CSV file, complete the following steps:

1. Open the command line on your computer.

2. Import your Straddle PGP key with the following command:

gpg --import Straddle_key.asc

3. If successful, the command line returns a message similar to the following:

gpg: key 6CFE17E37C6960B7: public key "straddle <dev@straddle.io>"

imported gpg: Total number processed: 1

gpg: imported: 1

4. Use the --encrypt option to encrypt the file and specify the following options:

clientname_encrypted.gpg: The name of the newly encrypted file.

dev@straddle.io: The name of the encrypted file recipient.

data.csv: The name and path of the CSV file.

The following is an example of the encryption command with all options specified:

gpg --output clientname_encrypted.gpg --encrypt

--recipient dev@straddle.io data.csv

Send encrypted files using SFTP

Secure File Transfer Protocol (SFTP) is a network protocol for securely accessing, transferring and managing large files and sensitive data. SFTP transfers files security using Secure Shell (SSH) and encrypted FTP commands to avoid password sniffing and exposing sensitive information in plain text.

Set up file transfer

1. Generate SSH keys: To generate SSH key, open the command line and run the following command:

ssh-keygen -t rsa

After the above command is successful, a few questions will pop up. Ideally, just press enter for default as shown below.

Enter file in which to save the key (/home/user/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

We recommend setting up a passphrase. Keeping the passphrase blank will enable the user to log in to the remote server without any password.

SFTP generates two keys: the id_rsa.pub public key and the id_rsa private key. The public should be transferred to the remote server and the private key should be in your local machine.

2. Provide Straddle with your public SSH key: To provide your public SSH key, contact your Account Manager at Straddle. This needs to be done in advance of the first transfer attempt.