OFTP2 is the industry-standard protocol for securely transmitting business-critical data over the internet. Through a mechanism of message acknowledgment and end-to-end encryption, it guarantees that your files arrive safely, and that you're always informed about delivery status.

The mendelson OFTP2 solution supports a broad range of document types, including EDI formats (X12, UN/EDIFACT), XML, and Microsoft Office documents. It ensures data integrity, confidentiality, and compliance with industry standards.

Whether as a standalone solution or tightly integrated into the mendelson business integration (mbi) suite, mendelson OFTP2 makes reliable partner communication seamless and efficient.

Built entirely in Java, mendelson OFTP2 runs cross-platform and can be deployed on premises, on virtual machines and in cloud environments.

• Easy to integrate
• Unlimited transactions and partners
• Comprehensive key and certificate management
• Partner configuration made easy
• Digital signatures and encrypted messaging, including the new cipher suites 08 to 10 (OFTP2 Implementation Guideline v3.2)
• Secure transport with TLS up to v1.3, Perfect Forward Secrecy
• Optional TLS client authentication and weak cipher disabling
• Automated log maintenance and data compression
• Full OFTP2 routing capabilities
• Flexible connection strategies per partner (send, poll or inbound only)
• Built-in certificate exchange support
• Backup and restore of configurations
• Customizable notifications by email (OAuth2 supported) and webhook (Teams, Slack, Discord, Telegram, Gotify)
• Detailed logging and audit trails
• Client-server architecture (commercial version)
• XML API for server control (Professional / Enterprise HA)
• User interface available in English, German, French, Spanish, Italian, Polish and Portuguese
• Additional components included in the commercial licenses:
  • PostgreSQL database (Professional / Enterprise HA)
  • REST API and Java API (Professional / Enterprise HA)
  • EBCDIC/ASCII converter (Professional / Enterprise HA)
  • High Availability (HA) cluster (Enterprise HA)

The mendelson OFTP2 architecture is designed for high flexibility and performance. It monitors dedicated partner directories, and once a new file appears, the system automatically processes and sends it to the appropriate partner.

All transactional data is stored in a built-in database system, included out-of-the-box for convenience. For advanced use cases, an external PostgreSQL database can be used (Professional and Enterprise HA).

In commercial installations, the OFTP2 client and server components can be deployed on separate systems, enabling distributed environments and scalable deployment strategies.

The mendelson OFTP2 solution is available in several editions to meet various requirements, from initial testing to enterprise-grade operations.

Choose between the free community edition for evaluation and smaller deployments (no professional support), or a commercial edition (Entry, Professional, or Enterprise HA) for advanced functionality, scalability, and professional support.

Below is a comparison between the community and commercial editions:

There are three commercial versions available: Entry, Professional, and Enterprise HA. Below is an overview of the features offered by each version.

For businesses with demanding availability or performance needs, the Enterprise HA edition includes high availability clustering and Premium Support. Learn more about features and licensing in our online store.

Included in all commercial editions (from Entry)

• Webhook notifications: Receive system alerts in Microsoft Teams, Slack, Discord, Telegram or Gotify, in addition to email. Templates for these services are included, failed deliveries are retried automatically.
• OFTP2 routing: Reach partners via OFTP2 gateways or operate mendelson OFTP2 as a gateway yourself.

The Professional and Enterprise HA licenses of mendelson OFTP2 also include the following components, no separate purchase required.

• PostgreSQL Database: Replace the embedded HSQLDB with an external PostgreSQL system for scalability and remote hosting.
• High Availability (HA, Enterprise HA only): Cluster multiple OFTP2 instances for redundancy and performance scalability.
• REST API: Integrate the server into modern web architectures via RESTful endpoints.
• Java API: Control mendelson OFTP2 directly from your Java applications.
• EBCDIC/ASCII converter: Convert data for mainframe partners per partner, configured in pre- and post-processing.
• OAuth2: Adds secure authentication for SMTP-based email notifications.

PostgreSQL Database

Externalize your database for better performance and remote access. Includes migration wizards that also transfer server settings, keys and certificates. Compatible with cloud-based PostgreSQL services (e.g., AWS).

High Availability (HA)

Cluster multiple mendelson OFTP2 nodes for high availability and horizontal scaling. All nodes share one external database and run the same mendelson version. mendelson software updates are applied to all nodes together in a planned maintenance window.

REST API

Allows integration with custom web applications and automation workflows through a modern REST interface, secured with HMAC-SHA256. Send files, manage partners and certificates, run connection tests, query transactions and read server settings and configuration issues.

OAuth2

Secures your email notifications (SMTP) using industry-standard OAuth2 authentication.

Easy Integration

The system offers a file-based interface that enables seamless integration into your existing infrastructure. New files in the partner directories are detected automatically, and flexible pre- and post-processing (scripts, commands, etc.) is supported. The commercial version enables direct server transfers via command line. Thanks to its pure Java architecture, it runs on all common platforms, including virtual machines and cloud environments.

For mainframe partners, the integrated EBCDIC/ASCII converter translates data per partner before sending and after receipt (Professional / Enterprise HA).

Unlimited Partners & Transactions

There are no artificial limitations on the number of partners or message exchanges. Whether direct, gateway, or substation connections, you're free to scale without added costs. Try the free open-source version before committing.

Digital Signature & Encryption

Supports secure message signing and encryption according to the OFTP2 Implementation Guidelines, including all cipher suites from 01 to 10:

• Cipher suites 08, 09, 10: AES-256 with RSAES-OAEP and SHA-256, SHA-512 or SHA3-512, recommended by Guideline v3.2 (2026)
• Cipher suite 07: AES-256 with SHA3-512 (Guideline v3.1)
• Cipher suites 01 to 06: AES-256 or Triple DES with SHA-1, SHA-256 or SHA-512 (for existing partner setups; Odette advises against SHA-1 and 3DES in production)

Key & Certificate Management

Built-in tools support the complete certificate lifecycle:

• Import/export keys and certificates, including the full certificate chain as PEM or PKCS#12
• Key generation with RSA or Elliptic Curve keys, SHA-2 and SHA-3 signatures, certificate signing requests (CSR)
• Keys and certificates are stored in the database, no keystore files to maintain
• Automatic check of certificates and keys on import, faulty entries are rejected
• Shows where a certificate is in use before you delete it
• CRL checks, backup and detailed metadata inspection

Partner Management

Define partner-specific connection settings, security parameters, and identities through an intuitive interface. Filters make it easy to work with large numbers of partners.

Connection Strategies

OFTP2 is a push-pull protocol. For each partner you choose how connections are established: connect when outbound data is available, poll the partner at regular intervals, or accept inbound connections only, e.g. if your system is not reachable from the internet.

Full OFTP2 Routing

Define gateways, substations, and virtual identities. Leverage OFTP2's SSID/SFID routing for flexible and compliant message exchange, and operate mendelson OFTP2 as a gateway for other partners.

Certificate Exchange

The system supports secure certificate exchange as outlined in OFTP2 implementation recommendations (where available).

Configuration Backup & Restore

Store your entire configuration as human-readable XML. Restore specific settings (e.g., individual partners) or entire environments, including multi-profile setups in the commercial version.

Integrated Notification System

Receive alerts for critical events by email or webhook. Webhook templates for Microsoft Teams, Slack, Discord, Telegram and Gotify are included. Email templates are fully customizable and available in all seven user interface languages. OAuth2 support for email is included in Professional and Enterprise HA.

Advanced Logging

Adjustable logging levels allow deep visibility into protocol details. View transfer summaries, transfer rates and technical insights directly within the interface.

Client-Server Architecture

Run the commercial version headlessly as a background service. Users from different platforms can connect to the server using the GUI client.

Server Control API

Automate configuration, partner management, and monitoring via command line or the Java-based XML API (Professional / Enterprise HA). Remote access support allows building web dashboards or headless integrations. A REST API is also included in Professional and Enterprise HA.