estate digital lockbox™ security faq

How is the Estate Digital Lockbox™ kept secure?

The protection of your information is of utmost importance to us. We use the latest in technology and security protocols, updated constantly to help ensure that your information is safeguarded and your privacy is respected. Only you, or those you choose, can access your account. Some of our security protocols include:
  • The entire site, including login pages, communicates with your internet browser over a secure encrypted SSL connection, the same approach that is used for credit card transactions. When you are on the Estate Digital Lockbox™ site, you should see a lock in the address bar of your browser and in the lower right border of your browser screen to confirm that you are seeing this through a secure connection.
  • When you login, there is an additional distorted image that you must read and enter the code from in order to prevent someone from trying to write an automatic script that makes multiple attempts to guess your username or password.
  • All of the files uploaded in the Estate Digital Lockbox™ are stored in an encrypted format. It takes a special security "key" to reassemble them into a readable form.
  • The location where files are stored is not accessible directly with an internet browser because the files are not stored as files. They are stored in a database.
  • Timed logoff Your online connection to your Estate Digital Lockbox™ will automatically terminate after 15 minutes of inactivity.

How did you validate security of the lockbox?

We have gone through extensive verification to ensure that there are no potential security vulnerabilities with the Estate Digital Lockbox™. Some of the most important elements of this testing are:
  • During the development of the Estate Digital Lockbox™, we used IBM's "Watchfire Appscan" Security application to identify and address any potential vulnerabilities.
  • VerAfied Logo After the lockbox was completed, we hired a reputable, experienced, independent firm (veracode.com) to review the entire site. This company performed extensive static and dynamic testing of every piece of the Estate Digital Lockbox™ and awarded the site with their VERAFIED™ Security Mark. The VerAfied security mark indicates that software has been independently assessed against the OWASP Top 10 and SANS Top 25 for technical flaws using automated binary analysis and/or dynamic analysis and has been found to have reached an acceptable level of security quality. For more information click here

How can I be sure that my data can't be lost?

We reliably maintain the valuable data in your Estate Digital Lockbox™ by:
  • Using high-reliability servers that sit behind firewalls to block unauthorized entry. The servers are also physically protected to be inaccessible to anyone without the appropriate security clearances.
  • Ensuring that all data is backed up regularly and transparently so that if there is any hardware failure of our servers, we can quickly bring a backup copy online.

How can I verify that the Lockbox site is secure?

Our internet address for the Digital Lockbox starts with https://. The "s" in https signifies that you are transacting communications over a secure connection. There is an image with a lock in it to the left of this address, which further helps identify that you are on the correct site. The web domain name address is www.estatedigitallockbox.com and this address immediately follows the https://.

How do I verify that emails are from your site?

Based on industry best practice, any email message coming from the Estate Digital Lockbox™ will be individually addressed to you (first name and last name) and will specifically come from support@estatedigitallockbox.com. It will never come from any other domain name. If you're ever in doubt, please contact support@estatedigitallockbox.com.

What should I do if I think something is suspicious?

Please don't respond to the suspicious email message or put any information into the suspicious website. Instead, please contact support@estatedigitallockbox.com.

n/a