What software is required to use CertiVox?

What are the client requirements for CertiVox desktop Content App Creator?

What are the client requirements for CertiVox Viewer?

What is the CertiVox Viewer?

What document / media formats are supported as CertiVox Content Apps?

Can I protect other formats?

How secure is the CertiVox Content App encryption?

Are CertiVox Content Apps bigger than the original?

Can I edit CertiVox Content Apps?

• It depends. A finished CertiVox Content App, no. Secured content is finished form only and cannot be edited of modified. CertiVox Extractable Apps, yes. You can extract the source file. Keep in mind, once your recipient extracts the source file, your content is not protected.

What's the difference between extractable and finished content apps?

• A finished app is not editable by your recipients.  This should be final version you send out that doesn't require collaboration.  Extractable apps are like zip files, in that the original source material can be extracted and edited.  Both formats support digitally signed audit records of the first app playback.

How does CertiVox safeguard content integrity and traceability?

• CertiVox Content Apps are final, unalterable, secure versions of a document or media file, which are time-stamped for creation and expiry.  Author and recipient details are securely burned in so ownership and distribution can be verified.  Modifying these details will render the CertiVox Content App inaccessible.

What is unique about the CertiVox Content App security method?

• CertiVox Content Apps are encrypted but also fully unique from each other.  Apps sent to multiple recipients will be physically different for each recipient in content structure and size.  This means that even if one app is hacked or reverse engineered, the data cannot be compromised for the other apps, even with the same source files.

How secure is the content app packaging process?

• Your documents and media never leave your PC during the encryption process, meaning that the source files are never seen or stored on the CertiVox servers.  Additionally, all manifest information is salted and hashed on our servers, and stored on encrypted AES 256-bit disks.

How do I prove traceability?

• Anytime an app is created, details including your name, organization and email address are burned in, as well as the same details for your recipient. These details are embedded in the content app and cannot be removed or edited. Anytime you need to prove ownership, or trace a leak to a recipient, just press the F1 key.

How does CertiVox enable me to enforce time-based access?

• CertiVox offers two forms of time control; Valid From; and Valid To.  This allows maximum control over content app access times.  The author can select the earliest date at which the app can be viewed and the date after which the content app cannot be viewed.

Does CertiVox use the computer's system clock?

• No.  CertiVox has invested heavily in ensuring that its time sources are accurate and secured, using multiple, encrypted links to the NIST Stratum 1 server and its own GPS receivers, both correlated.  Content apps connect to our servers, with digital signatures to prevent spoofing the time sources.

In what format are the digitally signed content app playback audit logs?

• Content App audit logs are XML based audit files that are generated when your recipients open your CertiVox Content Apps.  These files are just like signing for a physical, delivered package.  They are your proof that your recipient has your content.  Professional users can download these audit logs as needed.

How do I know these receipts are accurate / secure / legally valid?

• CertiVox time sources are implemented with the X9.95 protocol as the benchmark.  Our time sources are audited and encrypted with the master source in FIPS 140-2 hardware.  The audit data is digitally signed and time-stamped from the calibrated time source.  The signature uses PKCS 7 formatting.  

What is the Cargo Hold?

• Your cargo hold is the physical disk storage we assign your account for you to upload your CertiVox Content Apps, until your recipients collect them.  The size of your Cargo Hold depends on your account type, as well as how long your packages can remain in the Cargo Hold.

How do you secure personally identifiable information?

• Any information we collect on our customers, using free accounts or otherwise, is stored in encrypted disk volumes using AES 256-bit encryption.  Additionally, all username / password information is salted and hashed, and stored in encrypted columns in SQL databases. residing on those same encrypted disks. 

How secure are your data centers?

• In addition to our own safeguards, CertiVox ONLY uses SAS70 Type II certified data centers.  SAS70 certifies that a service organization has had an in-depth audit of its controls (including control objectives and control activities), which relates to operational performance and security to safeguard customer data.

What kind of privacy regulations does CertiVox operate under?

• CertiVox must operate under both the EU mandates and the Isle of Man mandates.  We feel this combination offers the strongest regulatory protection of customer data on the planet.  You can reach more in our privacy statement on this website. 

How does branding and advertising on content apps relate to this?

• CertiVox will place sponsored ads and branding on user's apps when they are created with the free account type.  However, NO personally identifiable information will ever be used in ascribing these brands and ads to specific users. 

But I can be ad targeted by the authors of content that I elect to receive?

• Yes, that's the point.  You have already elected to become a member of someone's trusted network to receive their content.  The author or distributor can only target you relative to the specific content you are viewing.  See the next point below for why this is a better model than current practices.
  

How is this better than the current internet advertising model for users?

• Ad tracking cookies, and the organizations that deploy them, have no declarative relationship with you, and can engage in data selling without your knowledge.  On the CertiVox Network, your information, relative to the content you are viewing, brands and ads, is declarative between you and the content author. 

Why is this a better model for advertisers?

• Your brands, on your content, can be accurately and precisely targeted to the relevant audience, to a degree impossible to reach by other channels. Why count on behavioural targeting to deliver your ads to a vaguely defined group, when you can control who sees the ads literally at the individual level?

How do 2nd Level Subscriptions work?

• 2nd Level Subscriptions are linked directly to yours, so you can enable or disable users as needed.  2nd Levels come with support, but do not have access to CertiVox Marketing Manger.  You can add as many 2nd Levels as you need, there is no limit.

Not a member yet