ActiveDisclosure Product Security Overview

Built from the ground up, ActiveDisclosure delivers secure, efficient financial reporting & SEC filing with a comprehensive network and unique infrastructure security controls in place.

Our systems, processes and experts leverage numerous tools to secure our clients data

• SOC 2 Type II audits
• Data is encrypted end-to-end while in transit via TLS v1.2
• AES 256-bit encryption used to protect data at rest
• AES 256-bit encryption used to protect database files
• Fully supported Multifactor Authentication and customer Single Sign-On (SSO) integration
• Static and Dynamic Application Security Testing technologies (SAST/DAST) are integrated into DFIN’s software development cycles to identify security risks prior to releases
• Azure Key Vault used for key storage
• Comprehensive, ongoing vulnerability scans are conducted across all applications to quickly identify and mitigate cyber vulnerabilities
• Use of next-gen antivirus and antimalware technologies
• Commitment to GDPR and other data protection regulations
• Annual third-party penetration testing with each finding’s remediation effort independently validated
• Extensive employee security awareness and training
• Rigorous governance and compliance controls