SaaS orchestrator + your buckets
Bridge. That is the golden path: mint-only into Blob, GCS, or S3.
Compare
Kiteworks is the closest peer: private content networking, hardened appliance options, and a broad compliance story. Bridge is white-label share, file-request, and workspaces with BYOS mint-only.
Pick Bridge when you want a SaaS orchestrator and you already standardised on Blob, GCS, or S3 for bytes. Pick Kiteworks when you want one hardened private content network, often on an appliance, across email, forms, and MFT.
Closest peer · Your buckets · SaaS control plane
Product vision names Kiteworks as the closest peer. That is about category: governed private exchange. Kiteworks sells a data control pane: file transfer, secure email, web forms, APIs, often on a hardened virtual appliance.
Bridge orchestrates. You keep object storage. Partners land on your hostname. You do not add another appliance to the DMZ for sharing.

Kiteworks' strongest story is consolidation and a reduced number of internet-facing exchange tools, plus deployment models that include customer-operated hardware.
Bridge's strongest story is the opposite shape: no file-byte warehouse on Trustholm, adapters into clouds you already operate, SIEM export into tools you already staff, and white-label without standing up an appliance programme.
View-only plus watermark is the Kiteworks parity wedge we shipped. Local regex and MIME gates are real. If your business case is a governed portal and you live in Azure, GCS, or S3, Bridge is in the shortlist.
A SaaS control plane plus your buckets. White-label share, file-request, and workspaces. Guest MFA. Hash-chained audit in the SIEM you already staff. Files at rest in Blob, GCS, or S3 you already operate.
Staff sign in with Entra, Google Workspace, or SAML. Guests prove identity with work login, a one-time email code, or passkey / TOTP. Every share can expire, revoke, and watermark. Workspaces give internals and externals a standing room with revision history.
Onboarding is storage, IdP, brand, scan engine, and SIEM. Walk invite, upload, download, revoke, and export before you expand the guest list.
If you already standardised on Kiteworks for email, forms, and protocols in one pane, tell us that on the access form. We will map the sharing motions Bridge still covers.
Azure, Google, or S3-centric estates that want white-label share/file-request, guest MFA, and SIEM, without operating a Kiteworks appliance or buying the full private data network.
Programmes that need a hardened appliance, consolidated email plus file plus forms, a FedRAMP-class procurement story, or on-prem physical sovereignty as the primary control.
| Capability | Trustholm | Kiteworks |
|---|---|---|
| Deployment shape | SaaS control plane (Cloudflare Workers) + customer BYOS | Hardened virtual appliance, private cloud, hosted, on-prem options |
| File byte custody | Customer Blob / GCS / S3 via minted URLs | Private content network / appliance storage model (customer-hosted possible) |
| Secure email and web forms | Invite notifications; portal is the product | Core consolidation story |
| Classic MFT protocols | Keep protocols on the tool you already run | In the broader Kiteworks platform story |
| White-label share portal | Core product, files in your cloud | Available inside the wider suite |
| Assessor evidence | Custody diagram, BYOS, SIEM export | Broad compliance labelling (buyer must still verify current status) |
Both products exist because central MFT custody aged badly. They still solve different estates.
Bridge. That is the golden path: mint-only into Blob, GCS, or S3.
Bridge. Partners land on your hostname, with guest MFA and SIEM audit.
Bridge. No appliance programme to stand up for sharing.
Request Bridge access if you want mint-only BYOS share, file-request, and workspaces. Bring the same CISO diagram you would take to a Kiteworks review.
Bridge is BYOS share, file-request, and workspaces with a SaaS control plane. Kiteworks is the closest peer for governed exchange, often on an appliance.
Sovereignty in Bridge is BYOS storage in the cloud you already operate, plus a named US, AU, or EU metadata cell.
Kiteworks has customer-hosted and sovereignty deployment models. Confirm current options with them. Our page compares design centres, not every SKU.
Bridge gives you a custody diagram, BYOS storage, and SIEM export your assessor can inspect. You map those controls in your own programme.
Bridge sends invite notifications. The product is branded share, file-request, and workspaces with files in your cloud.
It is the parity wedge we shipped: watermarked view via short-lived SAS. It is a deterrent and an attribution aid.
Bridge covers the branded portal. Keep SFTP on the tool you already run, or ask on the access form if a named deal depends on it.
Request Bridge access if you want the mint-only BYOS story. Bring the same CISO diagram you would take to a Kiteworks review.