--- title: Security | Crypton Data Protection Policy description: Discover Crypton’s advanced security policies that keep business data protected and compliant with industry standards. --- [Skip to content](https://cryptonmobile.com/security#main-content) - [Security](https://cryptonmobile.com/security) - [Customer Support](https://help.cryptonmobile.com/contact-support) - [Contact Sales](https://cryptonmobile.com/get-a-demo) Close - MODULES - [eSignature](https://cryptonmobile.com/esignature) - [AI ID Verification](https://cryptonmobile.com/ai-id-verification) - [Stipulations](https://cryptonmobile.com/stipulations) - [Messaging (RCS/SMS/Email)](https://cryptonmobile.com/sms-email-messaging) - [Secure Storage](https://cryptonmobile.com/secure-storage) - [CheetahPay (Crypto Payments)](https://cheetahpay.co/) - [Get a Demo](https://cryptonmobile.com/get-a-demo) - [Pricing](https://cryptonmobile.com/pricing) - [Resources](https://cryptonmobile.com/resources) - [Insights](https://cryptonmobile.com/insights) - [About Us](https://cryptonmobile.com/about-us) - [Contact Us](https://cryptonmobile.com/contact-us) [LOGIN](https://esign.edocs.co) CONTACT PHONE HOTLINE: [1.888.903.4726](tel:+18889034726)E-MAIL: [info@cryptonmobile.com](mailto:info@cryptonmobile.com) [![Crypton Business Software Logo](https://cryptonmobile.com/hubfs/crypton%20logo%20for%20header.svg)](https://cryptonmobile.com?hsLang=en) PHONE HOTLINE: [1.888.903.4726](tel:+18889034726)E-MAIL: [info@cryptonmobile.com](mailto:info@cryptonmobile.com) ![big c](https://cryptonmobile.com/hs-fs/hubfs/big%20c.png?width=300&name=big%20c.png) # Security Companies trust Crypton every day with their sensitive documents and information. We take your trust seriously. ## SOC 2 (A-LIGN Certified) The system is independently audited and compliant with SOC 2 standards for security, availability, and data protection. Request Report ![A-LIGN-SOC-Badge-468x600](https://39934060.fs1.hubspotusercontent-na1.net/hub/39934060/hubfs/A-LIGN-SOC-Badge-468x600.png?width=300&name=A-LIGN-SOC-Badge-468x600.png) Learn more about the people, processes, and technology we use to keep our customers safe. People **Security and Compliance Leadership** A dedicated security, compliance, and data privacy team works with leadership to ensure the business is advised and conducts secure, compliant, and ethical business. **Security Awareness Training and Testing** Onboarding training, quarterly training, ad-hoc training for situational threats, monthly social engineering tests with action for failures, and a 3 strikes policy that is enforced. **Tabletops** Simulations are conducted for a variety of scenarios to test the business response to business continuity, security, or other potential business-impacting scenarios. **Communications** Internal and external communications standards and channels are clearly defined. **Board Oversight** A board charter, quarterly meetings, and vetted members with experience in the SaaS and InfoSec space are current members. **Whistleblower** The company’s ethical values encourage accountability. **Cyber Insurance** We maintain multiple coverage types with adequate cover for business needs addressing things like ransomware, insider threats, and more. **Confidentiality Agreements** Employees are required to execute a confidentiality agreement on day one. Contractors, vendors, and partners are bound by Mutual Non-Disclosure Agreements. **Background Checks** These happen during the hiring process and annually on the anniversary date of the employee. **Role-based Access** Access is controlled based on role and any privileged access is handled with separate unique accounts Process **Access Reviews** We conduct regular access reviews to ensure our onboarding, offboarding, and change of status processes are effective. **SSDLC** We have a clearly defined secure software development life cycle with separate environments for DEV, QA/TEST, and Production. Releases are controlled and limited to certain staff to push to production. **Change Management** Weekly change management is adhered to and covers both infrastructure and product. **Vendor Management** Onboarding and offboarding with a strict vetting process including annual reviews and questionnaires. Vendors have clearly defined classifications known by the team. **Security Audits** Configuration, process, and other audits randomly happen to ensure that security and compliance are happening consistently. **Standards** Standards for configurations, encryption, and passwords are clearly defined and used. **Controlled and Limited Remote Access** A multi-layer approach to allowing remote access that includes “jump-points”, ACLs, encryption, and unique accounts allowed for remote access. Technology **Continuous External Scanning** Attack surface area scanning on a continuous basis provides multiple levels of risk and vulnerabilities on the internet-facing items for the business. **Pen Testing** This happens annually and rotates between pen testers so we always get new eyes, experiences, and techniques used to evaluate product risk. **Encryption** Established guidelines in policy, transit, and at rest at ALL places. **EDR** Fully managed on all endpoints and servers. **IAM** Unique general and privileged accounts for all accesses. **SSO** Where available we use SSO to enhance security authentication **MFA** If SSO is not available all other systems require MFA through an approved authenticator app. **ACL’s** Access control lists are used throughout the enterprise to limit access to resources where possible. **WAF** Web application firewalls are in place and monitored. **Code Scanning** All code is scanned for source code vulnerabilities using multiple tools. ## Encryption (TLS & At Rest) Data is securely protected both in transit and while stored using industry-standard encryption. ![3064197](https://39934060.fs1.hubspotusercontent-na1.net/hub/39934060/hubfs/3064197.png?width=300&name=3064197.png) ## Built on Microsoft Azure The platform is hosted on Microsoft Azure, providing scalable, reliable, and secure cloud infrastructure. ![Microsoft\_Azure](https://39934060.fs1.hubspotusercontent-na1.net/hubfs/39934060/Microsoft_Azure.svg) [![logo](https://cryptonmobile.com/hubfs/crypton%20logo%20for%20header.svg "logo")](https://cryptonmobile.com?hsLang=en) Crypton Business Software provides modular digital document infrastructure for high-trust industries including consumer finance, auto dealerships, lending, and equipment finance. Crypton modules — including the eSignature Module, AI ID Verification Module, Secure Storage Module, Messaging Module, and Stipulations Module — integrate directly into existing business software systems including loan origination platforms, dealer management systems, and consumer finance platforms. For organizations requiring a standalone document management environment, the Crypton Experience Platform provides a complete interface for the full digital document lifecycle. - Modules - [eSignature](https://cryptonmobile.com/esignature) - [AI ID Verification](https://cryptonmobile.com/ai-id-verification) - [Secure Storage](https://cryptonmobile.com/secure-storage) - [Messaging (RCS/SMS/Email)](https://cryptonmobile.com/sms-email-messaging) - [Stipulations](https://cryptonmobile.com/stipulations) - [CheetahPay (Crypto Payments)](https://cheetahpay.co/) - [Pricing](https://cryptonmobile.com/pricing) - [Insights](https://cryptonmobile.com/insights) - Learn - [Check Server Status](https://status.cryptonmobile.com/) - [Maintenance Notice](https://status.cryptonmobile.com/) - [Resources](https://cryptonmobile.com/resources) - Company - [About](https://cryptonmobile.com/about-us) - [Security](https://cryptonmobile.com/security) - [Customer Support](https://help.cryptonmobile.com/contact-support) - [Contact Us](https://cryptonmobile.com/contact-us) - [Get a Demo](https://cryptonmobile.com/get-a-demo) - [Security](https://cryptonmobile.com/security) - [Service Status](https://status.cryptonmobile.com/) - [Privacy Policy](https://cryptonmobile.com/privacy-policy) - [Terms and Conditions](https://cryptonmobile.com/terms-and-conditions) - [W-9 Form](https://cryptonmobile.com/hubfs/Crypton%202024%20W-9.pdf) - [Legal](https://www.hullbarrett.com/) ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Augusta", "addressRegion" : "Georgia", "postalCode" : "30901", "streetAddress" : "725 Broad Street" }, "email" : "info@cryptonmobile.com", "knowsLanguage" : "en", "logo" : { "@type" : "ImageObject", "url" : "https://39934060.fs1.hubspotusercontent-na1.net/hubfs/39934060/crypton%20logo%20for%20header.svg" }, "name" : "Crypton Business Software", "telephone" : "1.888.903.4726", "url" : "https://cryptonmobile.com/security" } ```