data transfers

How should we handle vendors that cannot use PGP encryption subkeys?

I'm automating transfers of employee payroll and HR data to multiple vendors over SFTP and APIs. We're also encrypting the files with PGP. We created a primary key…