OFTP2 is the industry-standard protocol for securely transmitting business-critical data over the internet. Through a mechanism of message acknowledgment and end-to-end encryption, it guarantees that your files arrive safely — and that you’re always informed about delivery status.

The mendelson OFTP2 solution supports a broad range of document types, including EDI formats (X12, UN/EDIFACT), XML, and Microsoft Office documents. It ensures data integrity, confidentiality, and compliance with industry standards.

Whether as a standalone solution or tightly integrated into the mendelson business integration (mbi) suite, mendelson OFTP2 makes reliable partner communication seamless and efficient.

Built entirely in Java, mendelson OFTP2 runs cross-platform and is easily deployable in modern environments including cloud, containers, and hybrid infrastructures.

• Easy to integrate
• Unlimited transactions and partners
• Comprehensive key and certificate management
• Partner configuration made easy
• Digital signatures and encrypted messaging
• Secure transport with TLS v1.0–v1.3, Perfect Forward Secrecy
• Optional TLS client authentication and weak cipher disabling
• Automated log maintenance and data compression
• Full OFTP2 routing capabilities
• Built-in certificate exchange support
• Backup and restore of configurations
• Customizable email notifications (OAuth2 supported)
• Detailed logging and audit trails
• Client-server architecture (commercial version)
• XML API for server control (commercial version)
• Available in English and German
• Plugin architecture to extend functionality:
  • PostgreSQL DB plugin
  • High Availability (HA) plugin
  • REST API plugin

The mendelson OFTP2 architecture is designed for high flexibility and performance. It uses a multi-threaded polling mechanism that monitors dedicated partner directories. Once a new file appears, the system automatically processes and sends it to the appropriate partner.

All transactional data is stored in a built-in database system, included out-of-the-box for convenience. For advanced use cases, an external database like PostgreSQL can be integrated via plugin.

In commercial installations, the OFTP2 client and server components can be deployed on separate systems, enabling distributed environments and scalable deployment strategies.

The mendelson OFTP2 solution is available in several editions to meet various requirements—from initial testing to enterprise-grade operations.

Choose between the free community edition for non-commercial use and exploration, or a commercial edition (Entry, Professional, or Enterprise HA) for advanced functionality, scalability, and professional support.

Below is a comparison between the community and commercial editions:

There are three commercial versions available: Entry, Professional, and Enterprise HA. Below is an overview of the features offered by each version.

For businesses with demanding availability or performance needs, the Enterprise HA edition includes high availability clustering and priority support options. Learn more about features and licensing in our online store.

The mendelson OFTP2 solution offers a modular plugin architecture to extend functionality and tailor the system to your enterprise needs. These plugins allow seamless expansion for performance, integration, and control.

Available plugins include:

• PostgreSQL Database Plugin – Replace the embedded HSQLDB with an external PostgreSQL system for scalability and remote hosting.
• High Availability (HA) Plugin – Cluster multiple OFTP2 instances for redundancy and performance scalability.
• REST API Plugin – Integrate the server into modern web architectures via RESTful endpoints.
• OAuth2 Plugin – Adds secure authentication for SMTP-based email notifications.

Plugin: PostgreSQL Database

Externalize your database for better performance and remote access. Includes migration wizards. Compatible with cloud-based PostgreSQL services (e.g., AWS).

Plugin: High Availability (HA)

Cluster multiple mendelson OFTP2 nodes to ensure uninterrupted operation and horizontal scaling. Enables maintenance of individual nodes without system downtime.

Plugin: REST API

Allows integration with custom web applications and automation workflows through a modern REST interface.

Plugin: OAuth2

Secures your email notifications (SMTP) using industry-standard OAuth2 authentication.

* MySQL and Oracle DB are trademarks of Oracle Corporation. Other product names are trademarks of their respective owners.

Easy Integration

The system offers a file-based interface that enables seamless integration into your existing infrastructure. Directory polling and flexible post-processing (scripts, commands, etc.) are supported. The commercial version enables direct server transfers via command line. Docker and Kubernetes compatibility is built-in, thanks to a pure Java architecture.

Unlimited Partners & Transactions

There are no artificial limitations on the number of partners or message exchanges. Whether direct, gateway, or substation connections, you're free to scale without added costs. Try the full-featured open-source version before committing.

Digital Signature & Encryption

Supports secure message signing and encryption using the latest OFTP2 standards:

• Encryption: Triple DES (3DES), AES-256
• Hashing: SHA-1, SHA-256, SHA-512

Key & Certificate Management

Built-in tools support the complete certificate lifecycle:

• Import/export keys and certificates
• Certificate signing and patching
• Backup and detailed metadata inspection

Partner Management

Define partner-specific connection settings, security parameters, and identities through an intuitive interface.

Full OFTP2 Routing

Define gateways, substations, and virtual identities. Leverage OFTP2’s SSID/SFID routing for flexible and compliant message exchange.

Certificate Exchange

The system supports secure certificate exchange as outlined in OFTP2 implementation recommendations (where available).

Configuration Backup & Restore

Store your entire configuration as human-readable XML. Restore specific settings (e.g., individual partners) or entire environments—including multi-profile setups in the commercial version.

Integrated Notification System

Receive email alerts for critical events with fully customizable templates. Available in English and German. OAuth2 support available via plugin.

Advanced Logging

Adjustable logging levels allow deep visibility into protocol details. View transfer summaries and technical insights directly within the interface.

Client-Server Architecture

Run the commercial version headlessly as a background service. Users from different platforms can connect to the server using the GUI client.

Server Control API

Automate configuration, partner management, and monitoring via a command-line or Java-based XML API. Remote access support allows building web dashboards or headless integrations. A REST API plugin is also available.