Enhanced security of document delivery with Safe4 version 3.5

/in

At Safe4 we are constantly seeking ways to improve the security and quality of the experience of using our document delivery and storage service.

One of the important changes we are making relates to the way in which email notifications are delivered when new documents are uploaded to the service, or when a user wishes to send a message regarding a document already stored in the system.

Remember that we never send documents as email attachments.  This is inherently insecure, and can potentially lead to regulatory and compliance problems.  However, we use emails for notification of new file uploads or messages relating to already-stored documents.

Some important improvements have been made to the email notification process:

  • Email notifications no longer carry hyperlinks to the documents stored within Safe4, but by clicking on a new link in the message, the user will be directed to a login page.  After login and authentication, the user will be presented with a new Notifications page.  This will carry live links to the files in question, and will also provide links to the folder or subfolder where the files are held.
  • An email link to the originator of the message, should the user wish to respond.
  • A Notifications Summary page will also be available, with a record of all of the Notifications that the user has received.

Security of the system has been enhanced, with a new facility for entering a PIN code.  If the user or their provider has chosen to use a PIN, this will be entered using an on-screen keypad to select the numbers.  This removes the possibility of keyboard loggers being used to capture user authentication data.

The invitation process for new users has also changed, and upon receiving an invitation the invited user will be offered a clear choice between using their existing account, and creating a new account. For users that have access to more than one Safe4 vault or provider account, this will simplify the process and speed up user registration.