Document Management FAQ: Security
Are the documents we store in Trust Exchange secure?
Yes! Your documents are very secure, if you mark them private. Private documents can only be seen by yourself and those whom you explicitly grant access.
How does security work?
When you access a document in a browser, it is through a temporary url that is only used once and then thrown away forever. All of the documents are securely stored in Amazon Cloudfront, which has been certified PCI DSS Level 1 as of August 2015. The data can only be accessed from our servers through heavily encrypted urls via unique signed certificates stored only on our servers. Once on our servers, we don't even save a copy, we pass the files right through to the browser of the authorized user.
Why are PINs less secure than sharing with a group?
PINs are effectively very short passwords. They are guessable and shorter than strings used by encryption algorithms. Please only use PINs for convenience and not for the intention of adding extra security.