SSLPost Secure Document Delivery | About Us: Security and Compliance

About Us

Security and Compliance

SSLPost Security Features

SSLPost uses Secure Sockets Layer (SSL) protocols with a 128-bit key to encrypt communication with the server. The Advanced Encryption Standard (AES) algorithm is used with a 128-bit key to encrypt messages. AES and SSL are recognised as highly secure algorithms when used with a 128-bit key.

Further security features of SSLPost are listed below:

SSLPost uses a highly secure encryption wrapper to securely deliver by email any type of digital content to authorised and registered recipients.
SSLPost emails include a fingerprint or seal that establishes the time and date that the email was sent and that the email has not been tampered with during its transmission.
All access attempts are recorded and sealed thereby preventing the audit log from being tampered with.

HMRC Compliance

The SSLPost solution meets the requirements set out in the HM Revenue and Customs notice for electronic invoicing. SSLPost guarantees the authenticity of the origin and the integrity of the invoice data by using an "advanced electronic signature" as set out by HMRC.

The HMRC definition of an advanced electronic signature is as follows:

Uniquely linked to the signatory.
Capable of identifying the signatory.
Created using means that the signatory can maintain under his sole control.
Linked to the data to which it relates in such a manner that any subsequent change to the data is detectable.

image: View Website Link View further details on the HMRC webpage on electronic invoicing

image: PDF document Read the HMRC electronic invoicing notice

image: PDF document Read the HMRC e-invoicing legislation

UKICOM ISO 27001 Information Security Management Standard (ISMS)

ISO 27001 Information Security Management System GCrypt has been granted the ISO 27001 Information Security Management System (ISMS) certification from UKICOM for its SSLPost software. ISO 27001 is the internationally recognised standard for setting out the requirements for an organisation's Information Security Management System.

GCrypt takes customer information security seriously and by gaining ISO 27001 certification we have taken great steps to ensure our secure electronic delivery services run professionally and securely.

image: View Website Link Learn more about the UKICOM ISO 27001 Information Security Management Standard

Password Protected PDF Documents versus SSLPost Delivered Documents

Password protected PDF files are a poor security solution for your business and should not be relied upon. This document outlines the failings of password protected PDF files and shows that SSLPost technology prevails as the best security solution for your documents.

image: PDF document Read the Comparison of SSLPost and PDF encryption document

Get Safe Online - Encrypt important information for extra security

Encrypting email and files means that only authorised users are allowed to access them - This can be a powerful guarantee of privacy and security. This is the message from the new government online resource www.getsafeonline.org which provides free and expert advice about staying safe while online. GCrypt fully supports the Get Safe on line campaign.

image: View Website Link Learn more about encryption on the Get Safe Online website