Forms and Payment Submissions are Secure and Safe With Us
​
Image/Photo submission forms are encrypted through a combination of in-transit and at-rest security measures to protect submitted data.
1. Data In-Transit (Submission)
When a visitor submits a form, the data is transmitted using HTTPS over TLS 1.2+ and automatic SSL certification. This ensures that the information sent from the user's browser to our servers is encrypted and cannot be intercepted in plaintext.
2. Data At-Rest (Storage)
Once received, we store the form data in encrypted databases.
-
Encryption Standard: We use AES-256, which is the industry standard for securing data on disk.
-
Sensitive Information (PII): For fields marked as Personally Identifiable Information (PII), we apply an additional layer of application-level encryption with a unique encryption key.
-
Hardware Security: Within its PCI-compliant environment, we utilize a FIPS 140-2 certified Hardware Security Module (HSM) to manage and store these cryptographic keys securely.
Payments encrypts payment data through a layered security infrastructure that protects information both during transmission and while stored on servers.
Encryption Methods
-
Data in Transit: All transactions are protected using HTTPS and TLS 1.2 or higher encryption. This ensures that sensitive payment information, such as credit card numbers, is encrypted as it travels from the customer's browser to our servers.
-
Data at Rest: When stored, user and payment data is encrypted using AES-256, the industry's strongest commercial encryption standard.
-
Hardware Security: Within its dedicated PCI environment, we use a FIPS 140-2-certified Hardware Security Module (HSM) to manage and store encryption keys securely.
Compliance and Security Standards
-
PCI DSS Level 1: We are certified as a Level 1 Service Provider and Merchant, the highest security standard for organizations that handle credit card information.
-
3D Secure (3DS): For regions like the European Economic Area (EEA), we implement 3D Secure 2 authentication, adding a multi-factor verification step to confirm a customer's identity during checkout.