Brosix Security – Encrypted communication

Servers and Infrastructure

At Brosix we maintain a powerful distributed network of IM servers. These high performance servers are located in state of the art facilities that meet the highest security standards.

Note: customer data is never stored on Brosix servers.

Administrators have the option to track user activity. If the Users Activity Log is enabled, the data is then stored on a secure dedicated server. This option is perfect for customers who are required to comply with regulations in regards to storing employee communication.

All of our servers are regularly backed up to ensure that data is never lost. Furthermore, backups are transferred to a minimum of two geo locations via a secured VPN connection.
Brosix operates a distributed and redundant system. If for any reason a server fails, the user is redirected to another server as to maintain secure communication.

Brosix has always been dedicated to providing a highly secure IM application that meets all security standards. With this approach, our customers can communicate in real-time with efficiency and peace of mind.

Communication Channel

During communication, Brosix implements a variety of tools to prevent data exposure.

Peer-to-Peer Connections  – All communication channels between users are preferably peer-to-peer. If a direct connection is unable to be made, the communication passes through a tunnel server. With this, the sender encrypts the data with the recipient decrypting. Also, it’s important to note that the tunnel server never sees the data, never processes the data, and never stores the data.

Data Compression and Encryption  – All Brosix communication channels are compressed and encrypted using AES 256-bit. This ensures that encrypted content can only be interpreted by an authorized user.

Website SSL Encryption  – Brosix strongly believes in securing all of its webpages with 128-bit encryption using Secure Sockets Layer (SSL). This is an internet standard for securing sensitive data communication.

Brosix continues to provide a high quality enterprise IM experience, with a primary focus on security. This will remain our top priority in the future, as it gives customers the ability to securely communicate in real time.

Applications

Brosix Brosix software communicates with its services using proprietary protocols and data exchange methods. It is not possible to log into a Brosix network without coordination between the software and servers.

All data in a network is transferred using the software, which much establish a connection with a server as a means of authenticating the user.

These security features are consistent throughout every private IM network. Every user is required to authenticate upon log-on. Furthermore, all communication between users and servers is compressed, encoded, and encrypted.

Application Security  – Brosix client applications are signed with a certificate provided by COMODO. This verifies the publisher identity and proves that a third party has not changed the files.

End User Authenticity  – All Brosix users are required to authenticate. The authentication process passes through secure servers to ensure that users are who they say they are. Network administrators have full control from their web control panel, allowing them to: create and delete user accounts, block accounts, block communication between users, and enable/disable features for specific (or all) users.

Brosix Staff  – Any Brosix staff member with access to servers has been trained to understand the finer details of the technology, with an eye toward customer service and security.

Brosix was built on the idea that IM communication should be 100 percent safe and secure. Data security has always been top priority, and this will be the approach we continue to take in the future.

SAS-70, HIPAA, SSAE 16, HITECH

Since Brosix does not process financial information, we are not subject to SAS-70.

Also, we do not process health information, so we are not subject to HIPAA.

Brosix provides customers with secure communication channels that allow for the efficient transfer of information. During the transmission, Brosix does not process, change, or manipulate the data in any way.

Any Brosix customer who is subject to HIPAA, HITECH, SAS-70, or SSAE 16 can easily meet these requirements.

Brosix is mindful of the incorporation of all necessary security features and standards in regards to its infrastructure and services. As has always been the case, data security will remain the highest priority at Brosix in the future.