Security

2. Data Encryption

• All data transmitted between your device and Agreed is encrypted using TLS 1.2 or higher
• Sensitive data at rest, including documents and signatures, is encrypted using AES-256 encryption
• Payment information is never stored on our servers directly; it is processed through PCI-DSS compliant payment processors

3. Account Security

• Multi-factor authentication (MFA) is available and recommended for all accounts
• Passwords are hashed using industry-standard algorithms and are never stored in plain text
• Automatic session timeouts protect accounts left idle on shared or public devices
• Login attempts are monitored for suspicious activity, with automatic lockouts after repeated failed attempts

4. Infrastructure Security

• Our infrastructure is hosted on reputable cloud providers with industry-leading physical and network security
• Systems are protected by firewalls, intrusion detection, and continuous monitoring
• Data is backed up regularly to prevent loss in the event of a system failure
• Access to production systems is restricted to authorized personnel and logged for audit purposes

5. Application Security

• Regular security audits and vulnerability assessments are conducted on our platform
• Periodic penetration testing is performed by independent security professionals
• Security patches and updates are applied promptly across our systems
• Secure coding practices and code review processes are followed throughout development

6. E Signature & Document Integrity

• All signed documents include a tamper-evident audit trail recording timestamps, IP addresses, and signatory actions
• Document hashes are used to detect any unauthorized modification after signing
• Access to stored documents is restricted to authorized parties associated with each agreement

7. Employee Access & Training

• Employee access to user data is limited on a need-to-know basis
• All employees undergo security and data protection training
• Access to sensitive systems requires authentication and is logged and periodically reviewed

8. Incident Response

• Investigate and contain the incident promptly
• Notify affected users and relevant regulatory authorities as required by applicable law
• Take corrective action to prevent recurrence

9. Reporting a Security Vulnerability

10. Your Role in Security

• Use a strong, unique password for your Agreed account
• Enable multi-factor authentication
• Avoid sharing your login credentials with others
• Log out of Agreed when using shared or public devices
• Report any suspicious activity on your account immediately

11. Changes to This Page

12. Contact Us