PPAP Abolition Accelerates, Usage Ratio Halved to Approx. 6% in 2 Years: HENNGE One User Survey

HENNGE Co., Ltd. (Headquarters: Shibuya-ku, Tokyo; President and CEO: Kazuhiro Ogura) has compiled and analyzed the usage status of PPAP (※1) in business emails based on usage data from its cloud security service, "HENNGE One." The results revealed that the usage ratio of PPAP has approximately halved in the past two years, now standing at around 6%. This indicates that the move away from PPAP, after being a temporary trend, has now become the new "standard" for business emails.

※1 This is a common term for a method of sharing files via email by sending a password-protected ZIP file and its password separately. While widely used in Japan, concerns about its insufficient security and convenience have led to an acceleration of "PPAP abolition" efforts, where files are shared through alternative means, primarily by government agencies and corporations.

Background of the Survey: Accelerating "PPAP Abolition" and Government Initiatives

In recent years, the vulnerabilities of PPAP have become a concern due to the increasing sophistication of cyberattacks. Since the Cabinet Office and the Cabinet Secretariat announced the abolition of PPAP in 2020, many companies have been considering alternative methods. Furthermore, in May 2025, the Financial Services Agency issued a notification (※2) urging related organizations to move away from PPAP, stating that "sending password-protected files should fundamentally be avoided, and encrypting the communication path of emails itself is fundamental." These government-led efforts to enhance security are accelerating, making the establishment of a secure file-sharing environment an urgent task.

※2 Quote: Financial Services Agency "Main Points Raised by the Financial Services Agency in Opinion Exchange Meetings with Industry Groups [Held on May 13, 2025 (Opinion Exchange Meeting with Major Banks)]" (https://www.fsa.go.jp/common/ronten/202505/01.pdf)

"PPAP Abolition" Evolution Seen Through Data: PPAP Usage Ratio Halved in the Past 2 Years, HSD Volume Increases to Approx. 6 Times That of PPAP

In October 2021, HENNGE launched "HENNGE Secure Download (hereinafter, HSD)," a PPAP abolition solution for securely sending and receiving files via email, as a feature of its cloud security service "HENNGE One." Since then, we have been monitoring the trends in file-sharing methods in business emails.

Comparing previous survey data with the latest data, it is evident that the move away from PPAP is not just a temporary trend but has fundamentally changed business practices, as exemplified by the halving of the usage ratio in the past two years.

1 Trend in PPAP Usage Ratio: Halved in the Past 2 Years, Drastically Decreased to Less Than One-Fourth in 4.5 Years

The PPAP usage ratio in emails with attached files sent by HENNGE One users has drastically decreased to less than one-fourth (6.2%) in 4.5 years from 29.4% at the service launch in October 2021.

The recent trend is particularly notable: from 12.4% in July 2024, it further halved to 6.2% in the latest survey conducted in June 2026, highlighting the accelerated pace of PPAP abolition.

【Survey Methodology】

HENNGE independently collected data from emails with file attachments sent by HENNGE One users, using the following extraction periods as the population. Emails with encrypted files attached were counted as having been sent via PPAP.

Extraction Periods:

October 3 (Sun) - 9 (Sat), 2021

July 7 (Sun) - 13 (Sat), 2024

June 7 (Sun) - 13 (Sat), 2026

* To ensure consistency in factors such as business days, the extraction period is from the first Sunday to Saturday.

2 Trend in Number of Transmissions: Share Reversed in 2.5 Years, HSD Volume Expands to "Approx. 6 Times" That of PPAP

Next, we compiled the transmission methods for emails with file attachments sent by HENNGE One users on a weekly basis.

Since October 2023, when HSD transmissions first exceeded PPAP, the volume has continued to expand, reaching approximately 6 times that of PPAP (5.62 million transmissions per week) in June 2026.

This data is based on samples extracted from emails with file attachments circulating within the HENNGE One infrastructure, and we have independently estimated the usage ratios and volumes of PPAP and HSD.

The latest survey was conducted for the week of June 7, 2026 (one week), and the trends were calculated by comparing this data with the data from the week of October 1, 2023 (one week), which was compiled using the same methodology.

Number of Companies Using HSD Exceeds 800,000

As evidence of the widespread adoption of PPAP abolition, the number of companies and organizations securely receiving files via HSD continues to grow steadily.

HSD has been recognized for its simple operation and high security, leading to its adoption by a wide range of companies, including listed corporations, and local governments. As of June 2026, the cumulative number of companies using HSD has finally surpassed 800,000 (※3). Even in this mature phase of widespread adoption, the feature continues to expand at a stable pace, demonstrating that PPAP abolition solutions have become a solid "business infrastructure."

※3 Recipients who receive attached files via HENNGE Secure Download perform email address authentication when downloading files. Based on the number of unique domains (excluding domains of prominent free email services, ISPs, etc.) derived from the number of email address domains, we have estimated the number of companies using the service.

HENNGE will continue to support secure file sharing through the promotion of HSD and HENNGE One, aiming to improve convenience and security, and further promote collaboration through simple file sharing.

About HENNGE Secure Download

HENNGE Secure Download is a PPAP abolition feature of the cloud security service "HENNGE One," released by HENNGE in October 2021. Senders can simply attach files to an email as usual. The files are automatically uploaded to cloud storage, and the recipient receives a PDF containing the download URL in the email body. When the recipient requests authentication of their email address, an authentication code is sent via a separate channel. A download URL is issued for each recipient, allowing only the authenticated recipient to download the file. Furthermore, if an incorrect file is attached by mistake, the URL can be invalidated after sending.

In June 2023, the Box integration feature "HENNGE Secure Download for Box" was added, allowing users to select "Box," a cloud storage solution widely used by businesses, as the upload destination for attached files.

Details of PPAP Countermeasures/Alternatives Page

About HENNGE One

HENNGE One is the No. 1 cloud security service in Japan (※4) for improving organizational productivity. While the utilization of the latest technologies, including SaaS, is essential for productivity improvement, it also presents various challenges such as building zero-trust security.

HENNGE One offers three editions to address these challenges: "Identity Edition" for protecting multiple system IDs and enabling efficient work styles; "DLP Edition" for preventing unintentional leakage of data scattered across the organization; and "Cybersecurity Edition" for protecting against cyberattacks across people, processes, and devices.

It embodies zero trust with a security service that lowers the hurdles for implementation and operation, thereby liberating technology.

URL: https://hennge.com/jp/service/one/

About HENNGE Co., Ltd.

As a SaaS company with the management philosophy "Transforming the world through the liberation of technology," HENNGE develops and sells unique services that bridge the gap between technology and reality. The company offers "HENNGE One," Japan's No. 1 cloud security service (※4) with a wide range of functions including single sign-on (SSO), access control, security for email and file sharing, and zero-trust-based device defense and management, as well as the cloud-based email delivery service "Customers Mail Cloud." Founded in November 1996, the company was listed on the Tokyo Stock Exchange's Mothers market (now Growth market) in October 2019.

The company name "HENNGE" combines "change" (HENNKA) and "challenge," expressing the determination to take on all kinds of changes.

Company Name: HENNGE Co., Ltd.

Stock Code: 4475

Location: Daiwa Shibuya Square, 16-28 Nanpeidai-cho, Shibuya-ku, Tokyo

Representative: Kazuhiro Ogura, Representative Director, President and CEO

URL: https://hennge.com/

※4 ITR "ITR Market View: Identity and Access Management / Personal Authentication Security Market 2026" IDaaS Market: Vendor Revenue and Share, ranked No. 1 for FY2025 (forecast).

<Contact Information Regarding This Release>

HENNGE Co., Ltd.

Corporate Communication Division

TEL: 03-6415-3660

E-mail: hennge-pr@hennge.com Contact: Ichishima, Yano

Company names, product names, and service names mentioned in this press release are trademarks or registered trademarks of our company or their respective companies and organizations.