Data Security
The company ensures data security by encrypting all user communications and stored data with AES-256, tracking all application access through audit trails, and regularly auditing and penetration testing their security policies, software, and hardware environments.
Data Storage and Security
Our data is transmitted and stored using industry-best data security practices. For example, all user communications are encrypted, and all data at rest (such as documents) are protected using industry-specified encryption protocols such as AES-256. All application access is also tracked via an audit trail.
Our security policies and systems are audited and tested regularly. These include audits of internal security procedures and protocols, as well as comprehensive penetration testing of our software and hardware environments to provide risk assessments of our applications and associated data.
Summary Checklist
- All data in transit and at rest is encrypted using AES-256 and industry-standard protocols.
- All application access is tracked via an audit trail.
- Security policies are audited regularly, including penetration testing of software and hardware environments.
If you are still unsure, contact Proof Support for help.
Related
Creating a Cybersecurity Disaster Recovery Plan
A cybersecurity disaster recovery plan (DRP) is a detailed, regularly updated document that outlines an organization's specific, role-assigned response strategies to cyber incidents—such as ransomware, DDoS attacks, and identity compromises—with the primary goal of maintaining business continuity, minimizing damage, ensuring tested backups for data restoration, and incorporating layered prevention measures and continuous improvement through drills and reassessments.
Proof Business Pro | Status Tracking and Audit Trail FAQs
The Proof Business Pro platform allows users to track transaction progress and view detailed audit trails—including signer information, timestamps, locations, verification results, and document history—via the Send & Manage tab, with comprehensive transaction details accessible through various tabs such as Summary, Recipients, Document, Identity, Meeting, Notes, History, and Activity Log.
How To Protect Your Business From Digital Identity Fraud
Digital identity fraud poses a significant and growing threat to businesses, involving complex tactics like phishing and synthetic identity theft that exploit multiple digital channels to steal sensitive information, resulting in substantial financial losses, and necessitating a layered defense strategy including multi-factor authentication, identity verification, proactive monitoring, and regular audits to effectively protect against and respond to such attacks.
Proof Trust Center
Proof's Trust Center outlines the company's comprehensive commitment to data privacy and security, highlighting annual third-party audits and penetration tests, disaster recovery plans, cyber insurance, a bug bounty program, multiple security certifications (SOC 2 Type II, TX-RAMP, Kantara Initiative, MISMO), and a detailed list of U.S.-based subprocessors providing services such as customer support, authentication, identity management, fraud detection, and data analytics.
Proof Release Notes: March 16, 2026 (DEPLOY-1292)
The March 16, 2026 Proof release (DEPLOY-1292) introduces multi-select field capabilities for bulk editing in document preparation, a streamlined "Download All" feature that packages completed documents and audit trails into a single ZIP file, and a new Digital ID enrollment for IAL2-verified signers to enable persistent identity recognition across Proof products, enhancing efficiency and user experience across business, real estate, and Verify transactions.
Biometric Class Action Waiver and Arbitration Agreement
The Biometric Class Action Waiver and Arbitration Agreement, last modified on October 10, 2024, mandates that all disputes related to the processing of biometric data by Proof or its affiliates must be resolved through individual arbitration administered by JAMS in Boston or remotely, explicitly waiving any rights to class actions or jury trials, with arbitration governed by JAMS Rules and contact available via privacy@proof.com.