Security and confidentiality are crucial issues for Tap&Sign. So we have introduced measures to ensure our solution is secure.
Data are encrypted when stored with the AES symmetric encryption algorithm and a 256 bit key handled by Tap&Sign. Data in transit are encrypted using the TLS protocol. Only state-of-the-art TLS versions are authorised.
Access to infrastructure is protected by a VPN. The VPN authentication is personal and depends on several authentication factors including a password, a physical security key and a certificate.
Data are replicated in real time in several geographical areas.
Tap&Sign keeps your documents in secure cloud services that fits the customers home country regulation. If there is no specific choice, we prefer EU based cloud servers. Customers who would like to obtain a digital archive service through Tap&Sign, will be offered the best alternatives that work seamlessly with our platform.
Tap&Sign deploys an audit programme to have its solutions continuously tested by independent experts (annual technical audits) and by the community. If you have identified a vulnerability, please report it to [email protected].
All Tap&Sign team members have a Certificate of Achievement for awareness training modules produced by the National Agency for the Security of Information Systems.
The eIDAS regulations standardise the rules for the use and legal recognition of the electronic signature processes of EU member countries. Tap&Sign is a trusted third party and has eIDAS certifications for electronic signature, electronic seal and time stamping.
The European Data Protection Regulation (GDPR) strengthens the protection of the personal data of EU citizens. Tap&Sign is a trusted third party and ensures the highest level of compliance with the GDPR
10 000+ collborators trust Tap&Sign to sign their documents
