Inkpaper allows users to securely sign contracts, review legal documents online, and keep their legal documents in one place. By uploading the signed documents, InkPaper provides the users the most secure platform to confirm that the documents have not been tampered with. 

In order to guarantee complete security to our customers, InkPaper underwent SOC2 Type 2 audit. The Independent Service Auditors examined InkPaper on controls relevant to security on several parameters.

​

Data Encryption and Infrastructure Security

InkPaper uses Google Cloud Platform (GCP) for production servers and databases. Google Cloud Platform is backed by certifications such as the SOC2 Type 2 and ISO 27001 that allows global operation and state-of-the-art security against outages. Our security commitments include:

• 24x7 availability of production systems

• Encryption of all data at rest and transit

• Secure data retention and data disposal

• Authorized user access and intrusion detection systems to prevent security attacks

• Regular vulnerability scans over the system and network, and penetration tests over the production environment.

InkPaper’s data retention policy treats and discards customer data when they are no longer in use. We are vigilant of the data we store and would only capture customer data to provide our services. 

​

Change Management & Data Communication

InkPaper management has developed policies and procedures to manage the information security of the system which are annually updated, and authorized by management, the executive team, and control owners. 

InkPaper maintains documented Systems Development Life Cycle (SDLC) policies and procedures to guide personnel in documenting and implementing application and infrastructure changes. Quality assurance testing and User Acceptance Testing (UAT) results are documented and maintained as per requests.

 

InkPaper has elected to use a platform-as-a-service (PaaS) to run its production infrastructure which simplifies our logical network configuration by providing an effective firewall around all InkPaper application containers. Using an automated monitoring system provided by GCP also enables InkPaper to provide a seamless service in the desired configuration. 

​

Risk Assessment Process

InkPaper’s risk management process proactively identifies and manages any risks that could potentially affect the customer. We understand the fragility of data and our preparation activities and investigations are structured to cater to the industry requirements. InkPaper’s management is also aware of any unique risks that could arise and takes necessary action to curb such out-of-the-ordinary cases.