How should companies go about ensuring secure date transmission?

What’s the best solution for a company that wants to securely receive documents from other business partners electronically. The company in question frequently receives documents containing financial information from other external entities. The company would like to ensure that the documents are both securely sent an received.

Is this enough reason to set up a VPN or would the use of encrypted files over the internet be a better solution?