At the application level, we not only enforce all standard security practices, but implement layers of redundant of security protection.

• End-to-end SSL encryption from the origin server to each user’s browser is required to access all site pages.
• Multi-factor authentication is mandatory for ALL user logins, regardless of plan type.
• On a client-by-client basis, IP address ranges for entire countries outside our service area (Russia, China) are blocked.
• Electronically signed contracts are stored digitally in encrypted database tables.  PDF copies of  Esign contracts are generated dynamically on demand and NOT stored on the server.
• File uploads (files users upload):
  • Nginx server rules prevent direct access to any private files uploaded to the server.  As a redundant measure, unique file storage locations are generated with dynamic hashes.
  • Application-level file access rules  require:
    • File download url hash keys (different  from the hashes for file storage locations above) mask the real server storage location of uploaded files. 
    • Even if an individual has the unique url hash key for a secure file download, the user must be (i) logged into the same active subscription account as the uploader AND (ii) authenticated with multi-factor authentication.