My Docs Online Security

The My Docs Online development team is comprised of former Senior Principal Computer Scientists from a leading Internet security firm. Their primary security goals in the design of the My Docs Online product were to protect the integrity of the user database, and to prevent access to your files or documents without your knowledge or consent.

By default all My Docs Online sessions use secure HTTPS and TLS (Transport Layer Security) processing. This ensures that files being uploaded and downloaded across the Internet are encrypted for added privacy.

Files on our servers also employ “Encryption At Rest”. This means that even in the unlikely event that stored files would be misplaced or stolen they are encrypted with AES-256. In addition, the three components of Encryption At Rest (encrypted files, encryption keys, and encryption/decryption processing) are each on separate servers.

The My Docs Online site has several layers of data security to provide access control:

• The My Docs Online web servers are deployed using a dual-homed configuration, thus providing specialized, application-specific firewall protection to our private network. This extra layer of security is specifically designed to keep your files and other information safe.
• All user files are safely stored on the My Docs Online private network servers. These servers are machines that are physically isolated from the public Internet, for security purposes.

Physical security is provided by a “hardened” facility providing seamless connectivity, guaranteed uptime, and security.

All files are stored on RAID devices, which in turn are replicated to an additional RAID storage subsystem, providing exceptional data integrity.

By design, files deleted by a user are first marked “pending delete” for approximately 72 hours, during which time they are available for “undelete” by the user. Following this “grace period” all copies of a deleted file are permanently removed from My Docs Online servers. No “backup copies” are kept.

Customers who require backup of their files are provided with tools to back up their files to a server at their location.

My Docs Online does not disclose details regarding hardware or software used, to protect its servers, customer files and information.