eSignOnline® and security

Overview

eSignOnline® allows users to collect electronic signatures in a manner that provides a superior level of security and a significant reduction in risk compared to the traditional paper and ink method. Digital document management limits the exposure to fraud, error and loss that have plagued industry users who normally rely on paper transaction files and their numerous photocopies.

GoPaperless Solutions has endeavored to go above and beyond the surface advantages inherent in the electronic document medium. This document outlines the specific areas in which security enhancements are especially relevant.

eSigning Security

Signing Session Activity Audit log
As signing sessions are created and managed, all activity is immediately tracked and updated in the activity log including session creation, documents uploaded, signers added, invites sent, session viewing, session signing, sequential invites sent, finalized copies sent. The activity log is accessible for all your signing sessions at anytime.

Encrypted Communications
eSignOnline® web services communications are encrypted with 256-bit encryption. Your data is secured and all logins are audited and stored. Your account is password protected with hashed encryption and each signing session is assigned a unique identifier.

Password protected signing sessions
Optionally, you can password protect each signing session adding another layer of security. While each signing session invitation email contains a secure link to the session and all activity and tracking is logged, you may want to further protect the signing session by adding a required password. You then call your client and verbally tell them the password. This is often referred to as "double opt-in".

Physical security

All files housed in eSignOnline® are stored in a state-of-the-art secure data center. The servers can only be accessed from within our network at our secure collocation facility. Our network is protected by multiple layers of firewalls and filters, redundant hardware, power and internet connectivity.

Our collocation facility in Southern California meets or exceeds legal and industry standards for security. Security measures include biometric door locks, alarm system, 24x7 security monitoring, and closed-circuit cameras.

Company backup policy mandates that frequently changing data, such as database devices, are fully backed up nightly and transferred to an off-site location. Static data which does not change frequently is fully backed up weekly and also stored offsite.

Company retains backups for three months. Backups are destroyed after this three month period.