Your data is important, and should be secure from the moment of input until it lands safely behind your firewall. That’s why iFormBuilder offers the most comprehensive set of security features in the industry.
Ultimate Security on all levels, from device to server
Our servers reside in a secure data center that goes through a SSAE16Type II ( formerly SAS70 Type II) audit yearly. We ensure OS level security patches are updated regularly, and all our servers have firewalls to block out unwarned traffic. On top of that, all databases are encrypted in compliance with PCI DSS, HIPAA, HITECH, FISMA, ISO9001 for data at rest encryption requirements.
We offer two robust levels of client-side security. With the free iForm client, all data is transferred via Secure Sockets Layer (SSL) to the server. The data is secured by iOS level securities which include passcode protection, encrypted file system, intrusion prevention, and remote wipe.
iForm ES
In addition to the standard iForm client, we offer an enhanced security client, iForm ES. iForm ES goes beyond iOS level security, enabling local database encryption in compliance with PCI DSS, HIPAA, HITECH, FISMA, ISO9001 for data at rest encryption requirements. iForm ES also enables application-level remote wipe and intrusion prevention. iForm ES’s encryption library is complied from the ground up and independent of Apple’s encryption library. Even if someone were to hack Apple’s encryption system, the iForm ES database is still secure. The encryption library is reviewed and certified by the US Department of Commerce. Even if your device is stolen, your data is safe with the iForm ES application.
All data transfer is done through SSL, but with iForm ES, you can use field-level encryption to selectively encrypt any field (except media) with end-to-end PKI encryption. You control the key that is used for the field-level encryption and you can change keys as often as you see fit. Since we do not store your key anywhere, data is encrypted until you download it from our server and apply your key.
iForm ES is the only solution on the market that provides this level of mobile device security. iForm ES is the only solution on the market to go through end-to-end HIPAA certification and is used in projects that require FISMA, HIPAA and ISO9001 compliance. While competitors claim data is secure on the server, no one approaches the robust client-side security of iForm ES.
iForm ES Maximum Security Includes:
- Only solution in the industry that provides regulatory level security on the mobile device
- User controllled field-level PKI encryption
- End to End Encryption, from Device, to Server
- Local Encrypted Database with AES256
- Quick turn-around with over-the-air form distribution
- Real time data upload
- Offline data collection (out of service, no wifi)
- Application level remote wipe
- Keyboard Cache protection
- Client-side password protection and encryption complies with PCI DSS, HIPAA, FISMA, ISO9001 and HITECH stardards
- Server encryption leveraging Gazzang ezNcrypt complies with PCI DSS, HIPAA, FISMA, ISO9001, HITECH standards for data encryption
