At FileThis we take security very seriously. We are completely committed to maintaining the security, integrity and confidentiality of your information. FileThis was architected and built from the ground up to be secure. Security is built into the fabric of the service.
After all, we realize that one tiny security breach and FileThis would not be in business – and we have worked too hard and invested too much to let that happen.
In fact, all the founders and key members of the team personally use FileThis to fetch their documents from all their accounts – and that should speak volumes. But we understand that you need to know what we mean by security and what we are doing to protect the integrity and confidentiality of your information, so here are the details.
No matter what device you use, from your desktop browser to your mobile phone, your data is always sent using 256-bit SSL – the highest standard communication security. So nobody can ever see or steal your data as it is transmitted to or from your FileThis account.
The credentials to your FileThis account, and to all your account connections are encrypted from the moment they are entered. On our servers and in our database, your credentials are encrypted utilizing AES 256-bit encryption, which is the highest encryption standard available today. Bottom line: even if a hacker could get access to your credentials on our servers (they cannot), it would be impossible for them to read any of the data.
Secure servers, Secure people:
FileThis employs the very reputable Amazon cloud services. So FileThis runs on, and all the data is stored on, servers managed by a large, publicly traded company whose entire reputation rests on ensuring the privacy, safety, and security of their customers data. Our servers sit inside climate-controlled, physically secure buildings that can only be accessed by biometric scans.
Access to any of our systems that hold any of your data is strictly limited and constantly monitored. In addition, as discussed above, your data is encrypted at all times while on our servers.
Read only service:
Our software can do nothing more than fetch and deliver your documents to you. If a third-party somehow got hold of your FileThis credentials (which is impossible unless you personally provided them with this information), they still could not get the credentials to your accounts since we never display this information in your FileThis account.
We don’t store the documents we fetch for you on our servers. They simply “pass through” from your institution to your destination of choice, so there is no security issue here. Again, all internet communications utilize industry-standard SSL encryption.
At any time you can delete one or all of your account connections. If you delete any of your connections, we remove all your credential information for those connections immediately. So at that point we would be storing nothing at all about those accounts.
We apply many of the bank-level security practices. This includes encryption, auditing, logging, and back-ups. We utilize third-party services to test our service for security issues – including scanning our ports, testing for SQL injection, and many other potential security weaknesses. We have also received the Verisign security seal as well as the McAfee Secure badge.