BreezySign Security and Trust Center
Top-tier security standards ensure peace of mind when signing documents anytime, anywhere.
Advanced Security Technology and International Certifications for Safe E-Signing
Information System Management Certification
BreezySign is certified to ISO 27001:2022 standards, delivering comprehensive cloud service security, privacy protection, and robust system management. This certification covers operations, system monitoring, secure program development, and overall organizational operation.
Data Privacy and Protection
BreezySign adheres to Taiwan's Personal Data Protection Act, ensuring users can confidently store personal and business information. For users without a BreezySign account, signatures and seals are only retained within signed documents without storage or backup by BreezySign. For details, refer to our Privacy Policy.
Cloud Data Storage, Processing, and Transmission
Utilizing Google Cloud Platform (GCP), BreezySign stores data in Taiwan's data centers, providing a secure and stable environment with rigorous adherence to global security and privacy standards. GCP's international certifications guarantee top-tier protection for personal and business data.
Data Encryption
Data at rest is encrypted, with all transfers secured through HTTPS and SSL/TLS to protect information in transit.
Access Control and Multi-Factor Authentication (MFA)
Only authorized personnel can access data, with MFA available for high-security tasks.
Security Monitoring and Audits
GCP provides real-time monitoring and logging to detect potential issues and facilitate post-event audits.
Compliance Certifications
GCP is certified with ISO 27001, ISO 27017, and ISO 27701, meeting international and regional security and privacy standards.
Multi-Layered Mechanisms to Ensure the Security of Electronic Signatures
We use TLS v1.2 to secure data transmission and AES-256 encryption to protect data in transit while hashing user passwords for added security.
Access to signed documents is secured through user accounts, IP whitelists, one-time passwords (OTP), and SMS-based verification to ensure the identities of both signatories.
AATL digital certificates ensure that any modifications or tampering with documents are immediately visible in Adobe Reader.
Every signed document includes a complete audit trail, logging participant names, email addresses, IP addresses, browsers, and platforms used, enhancing overall security.
We use the advanced electronic signature format (PAdES) defined by the European Telecommunications Standards Institute (ETSI) for PDF documents, ensuring compatibility and security.
Our API integrates Chunghwa Telecom's eSign service for identity verification. These certificates are embedded in documents using digital signature technology. Chunghwa Telecom's eSign service is WebTrust for CA certified and approved by Taiwan's Ministry of Economic Affairs, ensuring rigorous security compliance.