Encrypting the actual data, or the communication?
For example, I could use sftp to transfer files encrypted between two
systems. That would encrypt the communications but not the actual data
itself. You could put a sniffer on that comm but you would not be able to
make any sense out of that.
Many people use free sftp between disparate entities.