VerifIP® - Security Policy - Feb 2012

This security policy applies to all information gathered by VerifIP, LLC, a Florida limited liability company (“we,” “us,” “our,” etc.) from users (“you,” “your,” etc.) of our VerifIP® service and the related website and software (collectively, “service”).

Encryption

All information submitted by you through your browser or mobile device is secured by industry standard SSL 128-bit encryption. We understand the important role security plays in intellectual property, and we maintain a secure portal at all times to ensure the safety and security of your sensitive information.

Data Storage

Information is not stored in an encrypted format. It is stored on a cloud-based database platform, provided by Amazon Web Services. Access to the database is strictly controlled using public-key encryption and a "whitelist" of domains that are authorized to connect. Any system attempting to make a connection will be rejected if it is not on the list. The entries in the list are controlled via password-protected SSL administrative interface provided by Amazon. Physical access to the hard disk storage is limited to Amazon personnel, and due to the cloud-based nature of the database, data may be spread over several physical devices, making it nearly impossible to identify the exact physical device(s) on which your data is stored.

Mobile Data Storage

VerifIP® Mobile is a "thin client" that stores only a session token upon successful authentication with the web service. Data interchanged between the web service and your mobile device is never stored locally on the device. No passwords or other authentication or personally identifying information is stored on the device.