Your contracts represent the value of your company. ContractWorks keeps them safe.
ContractWorks’ is hosted in data centers that are rated among the most secure in the world, utilizing physical protective measures such as electronic key card entry, pin codes, biometric hand scans and 24/7 onsite security officers. Data centers are certified to ISO 27001 and Level 1 PCI compliance standards.
The documents you store in ContractWorks are constantly backed up to our dedicated servers with built in redundancy. This provides the potential to make ContractWorks a core component of any disaster recovery plan. Storing your most valuable contracts in the system can protect your business against theft, hardware failure, virus attack, accidental deletion and natural disaster.
ContractWorks provides encryption for your documents both at rest and in transit. All data, including backups, is encrypted with 256-bit AES (Federal Government certified for top secret documents). We deliver data to your desktop using TLS with 256-bit symmetric encryption and a 2048-bit authenticated key agreement. A separate salt masks passwords which are also encrypted with Bcrypt, a one-way hash.
ContractWorks provides the ability to set strict user access controls based around a folder or a set of folders. If your user doesn’t have access to a folder they don’t know it exists. When granting access to folders you can choose whether users can only view the contents, view and download, or if they have full access which provides freedom to add and reorganize contracts. Administrators are the only ones with the ability to invite other users.
As an Administrator in ContractWorks you are able to view a record of every login and every click taken within the system. The date, time and nature of the activity are all tracked. This information can have a number of benefits; from a compliance standpoint you have detailed oversight of your user’s actions and from an accuracy standpoint you have an easy way to track down mistakes or missing documents to make corrections.
With ContractWorks we have built data privacy measures in to our product, as well as in to our procedures and security measures. For example, no one at our company has access to client accounts, there is no “backdoor” log in for the services team. By removing our team from the loop we substantially reduce risk for our clients. In addition we never market our products to our client’s end users, which is a common practice with other more generic file storage and file sharing systems.