Relay AS2 messages between two trading partners
Receive an AS2 message from one trading partner and forward it to another over AS2. DocEvent verifies and decrypts the inbound message, returns its MDN, then re-signs and re-encrypts the payload for the onward partner and tracks that receipt too — an AS2 relay with no AS2 server of your own.
From
AS2
To
AS2
Receive endpoints
Cloud storage
Amazon S3
S3 Compatiblepull
GCS Blobpull
Azure Blobpull
Azure Data Lakepull
Azure Filespull
Servers & protocols
FTP Pull
SFTP Pull
HTTP Upload
Email
Apps & trading partners
SharePointpull
AS2trading partner
On-premise
Filerouterlocal filesystem
Agentlocal filesystem
DocEvent
routes · retries · logs
Send endpoints
Servers & protocols
FTP / FTPS
SFTP
Webhook
Email
Apps & trading partners
SharePoint
AS2trading partner
On-premise
Filerouterlocal filesystem
Agentlocal filesystem
Get started for free — our basic plan is free forever.
How AS2 to AS2 routing works
Source
AS2
Files arrive from an AS2 trading partner over the internet — signed, encrypted, and acknowledged with an MDN receipt.
DocEvent Channel
routes · retries · logs
Destination
AS2
Files are delivered to an AS2 trading partner — signed, encrypted, and tracked until the MDN receipt comes back.
1
File arrives via AS2
A hosted AS2 (RFC 4130) receive endpoint with its own URL — nothing to install and no AS2 server to run. Each source is pinned to one trading partner, so a message claiming any other AS2 identity is rejected, and the partner's certificate must verify every message. Encrypted payloads are decrypted and signatures verified automatically, and the MDN receipt is returned the way the partner asked for it: synchronously in the HTTP reply, asynchronously to their return URL, or not at all. Duplicate messages are detected per RFC 4130.
2
Channel routes it
DocEvent's channel server matches the incoming file to your configured route, queues it for delivery, and ensures no file is ever lost — even during downstream outages.
3
Delivered to AS2
Outbound AS2 (RFC 4130) delivery to your partner's AS2 URL. Messages are signed (SHA-256, SHA-384 or SHA-512) and encrypted (AES-256, AES-192, AES-128 or 3DES for legacy partners) using the partner's certificate, and can be compressed. Ask for a synchronous MDN, an asynchronous MDN, or none at all — signed receipts are verified and recorded, and a message whose receipt never arrives is parked for reprocessing instead of being quietly lost. Re-sends carry the same Message-ID, so a partner's duplicate detection suppresses them.
Common use cases
Real workflows that teams automate with a AS2 → AS2 channel.
- Act as an AS2 hub between a supplier and a customer
- Re-sign and re-encrypt partner traffic under your own AS2 identity
- Front a partner who cannot reach your other partner directly
- Consolidate several partner connections behind one AS2 identity
The two ends don't have to be the same company — invite a customer or trading partner into the channel and they run the AS2 or AS2 side under their own account, with their own credentials. Learn how shared channels work.
Technical details
Source:
AS2
A hosted AS2 (RFC 4130) receive endpoint with its own URL — nothing to install and no AS2 server to run. Each source is pinned to one trading partner, so a message claiming any other AS2 identity is rejected, and the partner's certificate must verify every message. Encrypted payloads are decrypted and signatures verified automatically, and the MDN receipt is returned the way the partner asked for it: synchronously in the HTTP reply, asynchronously to their return URL, or not at all. Duplicate messages are detected per RFC 4130.
Files arrive from an AS2 trading partner over the internet — signed, encrypted, and acknowledged with an MDN receipt.Destination:
AS2
Outbound AS2 (RFC 4130) delivery to your partner's AS2 URL. Messages are signed (SHA-256, SHA-384 or SHA-512) and encrypted (AES-256, AES-192, AES-128 or 3DES for legacy partners) using the partner's certificate, and can be compressed. Ask for a synchronous MDN, an asynchronous MDN, or none at all — signed receipts are verified and recorded, and a message whose receipt never arrives is parked for reprocessing instead of being quietly lost. Re-sends carry the same Message-ID, so a partner's duplicate detection suppresses them.
Files are delivered to an AS2 trading partner — signed, encrypted, and tracked until the MDN receipt comes back.Automatic retries with exponential back-off
Full end-to-end audit log for every file
Zero-code setup via the DocEvent UI
Reliable delivery even during downstream outages