Security

HTTP Strict Transport Security:
Your web session is already secure and you may not even know it. All KELMARSafety.com webpages utilize the HTTP Strict Transport Security protocol and are registered with hstspreload.org. What this means for you is that all modern browsers enforce an encrypted tunnel between you and our servers to prevent unauthorized users from intercepting information uploaded or retrieved from KELMAR.

RSA (2048 Bits) SHA 256 RSA Browser Certificate + Extended Validation (EV) Certification:
We utilize one of the most advanced forms of browser encryption to communicate works on all browsers, operating systems and mobile devices. KELMAR Safety Inc. also passed the rigorous verification process required to obtain our EV SSL Certification from DigiCert Inc. DigiCert Inc. is one of the oldest root certificate authorities.

AES-256 Cryptography:
KELMAR Safety Inc. uses AES (Advanced Encryption Standard) with 256-bit keys — also known as AES-256. It’s the same encryption standard adopted by the U.S. government and used by security experts worldwide to protect classified information.

Automatic Encryption:
When you upload a file to KELMAR Safety Inc., your file is automatically encrypted using AES-256 bit cryptography and protected by a randomly generated complex passphrase. No two passphrases are alike. This ensures that no one can brute force attack your files. Even if that was mathematically possible, they would only have access to one file. Your other documents would still be protected.

Automatic Decryption:
When you open a file stored on our system, the system automatically decrypts your file for viewing for your session only. Once your session is closed, the decrypted file is no longer available. The decrypted file is never stored on our servers and therefore can’t be intercepted.

When deciding on the location of our servers, we knew we wanted to use datacenters that followed industry leading best practices. We knew they had to have the infrastructure we needed and the technical knowhow to meet our standards and to be able to support our unique advanced architecture design. We also wanted to make sure our customers had access to their information at all times and without worry of security and availability. Below are some of the highlights of our chosen datacenter partner.

• Multiple Mirrored datacenters across Multiple States
• Mirrored Infrastructure for Redundancy
• Pushbutton Recoverability
• Multiple location offsite double encrypted backups
• Increased Uptime / Availability
• Access to your file 24/7/365
• SSAE 18 / SOC 2 Compliant
• American Institute of Certified Public Accountants (AICPA) professional standard
• Replaced SSAE 16 / SAS 70 Certificate
• Highest level of auditing currently available
• SOC Reports available with signed Confidentiality Agreement