Security and Compliance

   SSLPost Security Features

SSLPost uses Secure Sockets Layer (SSL) protocols with a 128-bit key to encrypt communication with the server. The Advanced Encryption Standard (AES) algorithm is used with a 128-bit key to encrypt messages. AES and SSL are recognised as highly secure algorithms when used with a 128-bit key.

Further security features of SSLPost are listed below:

---

   HMRC Compliance

The SSLPost solution meets the requirements set out in the HM Revenue and Customs notice for electronic invoicing. SSLPost guarantees the authenticity of the origin and the integrity of the invoice data by using an "advanced electronic signature" as set out by HMRC.

The HMRC definition of an advanced electronic signature is as follows:

• Uniquely linked to the signatory.
• Capable of identifying the signatory.
• Created using means that the signatory can maintain under his sole control.
• Linked to the data to which it relates in such a manner that any subsequent change to the data is detectable.

---

   UKICOM ISO 27001 Information Security Management Standard (ISMS)

GCrypt has been granted the ISO 27001 Information Security Management System (ISMS) certification from UKICM for its SSLPost software. 27001 is the internationally recognised standard for Information Security Management meaning that the availability, integrity, and confidentiality of the information vital to your business is ensured.

GCrypt takes customer information security seriously and by gaining ISO 27001 certification we have taken great steps to ensure our secure electronic delivery services run professionally and securely.

---

   CESG Claims Tested Mark (CCTM) Certification

GCrypt has been awarded the CESG Claims Tested Mark (CCTM) certification for its SSLPost secure document delivery software. CESG is the national technical authority for information assurance and it aims to protect and promote the vital interests of the UK by providing advice and assistance on the security of communications and electronic data.

The CESG Claims Tested Mark (CCTM) scheme provides a government quality mark for the public and private sectors based on accredited independent testing, designed to prove the validity of security functionality claims made by vendors. In more colloquial terms, the CCTM is designed to assure public bodies that a product or service does ‘what it says on the box.

---

   Password Protected PDF Documents versus SSLPost Delivered Documents

Password protected PDF files are a poor security solution for your business and should not be relied upon. This document outlines the failings of password protected PDF files and shows that SSLPost technology prevails as the best security solution for your documents.

---

   Get Safe Online - Encrypt important information for extra security

Encrypting email and files means that only authorised users are allowed to access them - This can be a powerful guarantee of privacy and security. This is the message from the new government online resource www.getsafeonline.org which provides free and expert advice about staying safe while online. GCrypt fully supports the Get Safe on line campaign.

back to top