OfficeDrop Security & Privacy
OfficeDrop has been designed from the ground up to provide customers with state-of-the-art security through every step of its document management and document scanning process. The company does everything practical to ensure that the documents sent to OfficeDrop are safe, kept strictly confidential and are securely available 24/7.
New York Times Case Study: OfficeDrop's Background Check Policies
OfficeDrop takes security so seriously that the New York Times has published a series of Case Studies on OfficeDrop's background check policies.
|
|
"The case study we published last week chronicled the efforts of OfficeDrop, a start-up that scans sensitive documents for its clients and therefore must ensure that employees are trustworthy." |
OfficeDrop Security & Privacy Highlights
- All paper documents are mailed to OfficeDrop in pre-paid tamper-evident and water-proof Tyvek envelopes (called OfficeDrop scanvelopes) or pre-paid secure boxes.
- OfficeDrop scanvelopes are shipped using first-class USPS mail and boxes are shipped using UPS.
- Customer accounts, documents and data are password protected, and no one can access that data unless they have been granted permission.
- OfficeDrop performs a comprehensive security check on all employees, prohibits recording instruments in the processing center, and tracks every document through the entire system.
- All documents and data are stored in nondescript Amazon data centers to ensure maximum security, confidentiality, and dependability.
- Documents are stored in two physical locations across the US to protect them from natural and other disasters.
- OfficeDrop's processing center is protected by 24/7 alarm and video monitoring.
- OfficeDrop online systems are audited each day by McAfee Secure to ensure information is both secure and meets the highest privacy standards.
- All communications with the OfficeDrop website and the documents customers view or send to OfficeDrop are encrypted with full 256-bit security using AES-256.
- OfficeDrop does not sell or rent your information to third parties without your explicit consent.
- On cancellation, your documents are made available to you for download for 30 days before they are purged forever.
OfficeDrop Security & Privacy Details
Document in-Transit Security
- Tamper-evident, water-proof and secure scanvelopes and secure boxes
- Pre-paid first class USPS mail and UPS Pickup and drop-off
Data Center Security
- Amazon's proven, secure, large-scale data centers
- Nondescript, military grade, perimeter control beams and natural boundary protection
- Access permitted to authorized personnel with multi-layer, two-factor authentication
- State-of-the-art intrusion detection systems
- 24x7x365 onsite security
System Security
- Battle-hardened OS with ongoing protection from exploits
- Dedicated firewall per server
- Distributed denial of service mitigation
Scanning Center Security
- Comprehensive background check of all operational personnel
- No recording devices permitted in operations center
- All documents tracked throughout the system
- Alarm and video monitoring
- Documents securely shredded on site or returned to you - the choice is yours
Application Security
- Password protected accounts with user-configurable access
- All passwords encrypted during transmission and storage
- Full AES-256, 256-bit SSL encryption of documents and data
- Automated inactive session time-outs
- Can be used as a pure web application, no downloads needed
- Daily Hacker-Safe third party audits by McAfee
Privacy Policy
- Certified by TRUSTe, the leading privacy seal certification organization
- Customer information is not sold or rented to third parties without explicit consent
- Customer information is purged in its entirety
- from systems on cancellation
