DocVerify Security

DocVerify's unprecedented document security provides peace of mind. Your documents are safe and completely unalterable.

Unlike some other popular competing solutions, DocVerify provides many layers of security—both for your documents and for the storage system that holds it. Security is a serious consideration that has all too often been ignored in the rush to e-signatures.

	We take security seriously enough to risk being classified as clinically paranoid. But we figure that’s way better than risking the integrity of your business documents.

7 Layers of Document Security

DocVerify's 7 layers of protection safeguard your documents by providing:

1. A DocVerify cover page with bar coding and watermarking technologies
2. Time stamping, bar coding, encryption, and watermarking for every page
3. Unique 128 bit DocVerify ID's
4. Two unique 384 bit or 512 bit fingerprints
5. Compliant PKI technologies
6. Unique bar codes
7. Unique Digital Signatures

Ultra Strong Document Encryption

NIST FIPS 197 and IETF RFC 4107
DocVerify features one of the strongest 256-bit advanced encryption standards (AES) providing powerful document and file encryption. This prevents unauthorized access or views, including access by our own IT personnel. Encrypted documents can only be opened or viewed by the document owner or users the document owner has authorized. Nobody else. No way.

Highest Encryption of Stored Data

Document encryption is achieved at multiple levels, with a cascaded key and cipher management to prevent access to confidential documents stored in the E-Vault. All keys required for document decryption are also encrypted with strong 512-bit encryption. That is a serious level of encryption.

AES 256 bit SSL Security

Communications through DocVerify, and documents emailed through DocVerify are encrypted with strong AES 256 bit SSL enhanced validation security.

Strong PKI Hashing

Each document is protected with strong PKI hashing. Certificates are stored securely and encrypted in order to protect them from being compromised. This is a good thing. Ask your local hacker.

Strong PKI Standards

ISO/IEC 9594-8/ITU-T X.509
DocVerify is its own Certificate Authority (CA) IETF RFC 3647 and IETF RFC 4210. We generate our own tamper-proof certificates on a regular basis. This keeps the bad guys at bay.

Strong Two-factor & Three-factor Authentication

Access to any member area is through a strong challenge response password-based authentication system. Passwords as well as other confidential information are encrypted with RSA keys in order to keep them safe.

Ultra Secure SAS 70 Type II Data Centers

DocVerify data centers are all audited SAS 70 type II certified facilities. SAS 70 represents that a service or outsourcing organization has been through an in-depth audit of their control activities, which generally include controls over information technology and related processes, logical and physical access, security of the environment, backup/recovery, secure storage, and other such operations. Expensive. But worth it.

Salesforce Approved

Our security systems and infrastructure have been fully tested and certified by Salesforce.com.

Sequential Document System

Time-stamped documents are kept secure within a sequential sub-system, which prevents documents from being injected into the system. Unlike a paper-based method where entries can be easily forged, the system maintains a sequential tamper proof method that prevents forgeries with full audit trails.

Tamper-Proof Audit Trail

Actions are recorded in a tamper-proof audit trail, providing a completely transparent and fully documented information flow. The data reports may be formatted in a variety of different ways or available as a certificate download.

Watermarking / Stamping

In order to prevent document manipulation or camera-based attacks, each page is stamped with a date/time the document was created, page numbers, unique bar codes, and dynamically embedded watermarks.

ETSI TS 101 733

The European Telecommunications Standards Institute (ETSI) produces globally-applicable standards for Information and Communications Technologies (ICT), including fixed, mobile, radio, converged, broadcast and internet technologies. DocVerify meets these standards.

Password Based Cryptography IETF RFC 2898

DocVerify meets or exceeds The Internet Engineering Task Force on Password-Based Cryptography.

ISO/IEC 27002

The "ISO/IEC 27000 series" is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) which provides best practice recommendations on information security.

NIST FIPS 140-2 Level 1 and Level 2 Validated

Easily set DocVerify to notify signers if they have documents waiting to be signed. Your follow-up process is simplified, as DocVerify automatically reminds customers (and you!) of documents needing their attention.

The Bottom Line

With DocVerify your documents are secure and enforceable in a court of law. Way more than paper.