Home›Insights›Articles›Secure mass distribution of payment statements: from attachment to traceable package
Blog · Secure file transfer · Financial services
Secure mass distribution of payment statements: from attachment to traceable package
Millions of documents, logistics costs that climb every year and no certainty about who received what. What we learned helping Colombia's public savings and housing fund deliver payment statements to more than 4 million users.
A user base that keeps growing
Home financing in Colombia had a busy 2025: according to Camacol, the national construction chamber, 182,578 homes were financed and disbursements reached COP 29.2 trillion, a 19.7% real increase over 2024. Every new loan and every new member adds another recipient to the statement cycle, and at institutions that serve both individuals and employers, the volume multiplies.
Layered on that volume is regulation. Payment, balance and contribution data is personal financial information, and Colombian data protection rules require safeguards that keep it confidential. Emailing a PDF as an attachment, with no encryption and no access control, rarely meets that bar at scale.
Three models that tend to coexist (and why they don't scale)
When we look at how institutions with millions of users distribute documents, we usually find three models running side by side:
- Printed and couriered. Expensive, slow and traceable only as far as the courier's delivery receipt.
- Email attachment. Fast, but the file sits in mailboxes the institution doesn't control, with no way to know if it was opened.
- A custom-built portal. Secure in theory, but costly to maintain and disconnected from document generation.
The challenges our client brought to us covered exactly that ground: meeting institutional design standards, integrating the applications that produce the data and delivering statements securely.
From generated document to traceable package
Fortra's GoAnywhere MFT centralizes, encrypts, automates and audits file exchanges. For mass document delivery, two of its collaboration modules are especially useful:
- Secure Mail: sends messages and files as secure "packages." Recipients get an email with a unique link and download the content over HTTPS. Senders can set a password, an expiration date and a maximum number of downloads, and can even recall a package after it's sent. There are no file size or file type limits.
- Secure Folders: gives authorized users a browser-based space to view, share and download files, with granular permissions and HTTPS protection.
- Package auditing: logs when each package was sent, opened and downloaded.
For the fund, Redsis integrated a PDF design API , which renders every statement with the institution's branding, with GoAnywhere Secure Mail and Secure Folders . Each document is generated, packaged and delivered in a single workflow, for both business and individual users.
A payment statement isn't delivered when it leaves the server. It's delivered when the right person opens it and you can prove it.
Five keys to delivering documents to millions of users
1. Separate design from delivery
The document and the channel are different problems. Solving design with a dedicated PDF generation component and delivery with a secure transfer platform lets you change one without breaking the other: a new template doesn't force a new channel, and a new channel doesn't force a redesign.
2. Automate end to end
Every manual touch between generation and delivery is a chance for errors and delays. A workflow that pulls data from source systems, renders the PDF, packages it and sends it without human intervention is what makes the jump from thousands to millions of deliveries possible.
3. Design security for the average recipient
Passwords, expiring links and download limits protect the data, but they have to be simple for a member opening a statement on a phone. A solution nobody can open generates more calls than the one it replaced.
4. Offer two doors: push and pull
Some users want the document sent to them; others prefer to look it up when they need it. Combining secure package delivery with secure self-service folders covers both profiles, especially when individuals and businesses share the same channel.
5. Measure delivery, not just sending
Package-level auditing shows how many statements were opened, which were downloaded and which were never viewed. That data serves compliance and helps improve communication with users.
The result: delivery that is faster, cheaper and traceable
Today the fund sends payment statements more than 80% faster, the solution has generated more than COP 300 million in logistics savings, and more than 4 million business and individual users benefit from it, with better delivery times, security and traceability on every send.
For a public institution with national reach, that means something very concrete: every member gets their information on time and protected, and money that used to go to logistics is freed up for the institution's mission.
Where to start
If your institution still distributes statements or reports by courier, as email attachments or from a portal disconnected from the systems that generate them, a good first step is an assessment of the full cycle: generation, design, delivery and evidence. At Redsis we combine more than 25 years of mission-critical platform experience in financial services with Fortra automation and integration solutions such as GoAnywhere MFT and JAMS.
Read the full story
See how Colombia's public savings and housing fund distributes payment statements with GoAnywhere MFT.