The Deputy Chief of Operations for Information Warfare (OPNAV N2N6), Vice Adm. Matthew J. Kohler, issued NAVADMIN 210/19, Sept. 10, which designates the Defense Department Secure Access File Exchange (DoD SAFE) as a secure method of transferring large files.
DoD SAFE, available at https://safe.apps.mil, is a no-cost, web-based tool that provides authenticated DoD CAC users and guests (unauthenticated users) the capability to securely send and receive large files, including files that are too large to be transmitted via email.
Guests can receive files from CAC users, only if CAC users requested files, and send files to CAC users. Notification is communicated via email.
DoD SAFE is the general use replacement for the Army Aviation and Missile Research Development and Engineering Center (AMRDEC) SAFE website, which was found to be unsecure.
Features of DoD SAFE allow online exchange of data files (up to 8 GB) between DoD, other governmental, and civilian agencies.
DoD SAFE has an Authority to Operate (ATO) and is approved for transfer of FOR OFFICAL USE ONLY (FOUO), Personally Identifiable Information (PII), and Protected Health Information (PHI) data. DoD SAFE utilizes the latest web browser encryption transport protocols to secure files when they are in transit. Files uploaded into SAFE can be encrypted at rest if the sender selects the corresponding check box on the DoD SAFE site. DoD SAFE users are responsible for ensuring they encrypt FOUO, PII, and PHI data. DoD SAFE is for UNCLASSIFIED USE ONLY.
Further, commercial information technology file exchange services are not authorized.
Kohler directs alternative methods of information exchange, outlined in NAVADMIN 283/18 (On Loss OF AMRDEC SAFE), remain valid options, except for the discontinued Army Research Laboratory Safe Access File Exchange (ARL SAFE).
All individuals are encouraged to exercise the best practice of sharing links rather than large files when practical. Chief Information Officers and security managers are responsible to ensure all practices comply with regulations governing PII/PHI and other sensitive content.
Email Capt. Vincent Augelli, OPNAV N2N6G, vincent.a.augelli@navy.mil, for questions and additional information.