Here at One Sure Thing, security is our highest priority. We realise that you are trusting the One Sure Thing service with important information and documents. Your information is encrypted and protected with industry-leading technology and security.
Each building block component for the One Sure Thing platform is backed by their own security protocol, enabling platform security to be protected by a team of people, constantly looking after it.
The content management system we use is WordPress, a dynamic open-source content management system which is used to power millions of websites, web applications, and blogs. The WordPress Security Team works to identify and resolve security issues in the core software available for distribution and installation at WordPress.org, as well as recommending and documenting security best practices for third-party plugin and theme authors. The WordPress Security Team is made up of approximately 50 experts including lead developers and security researchers. The team consults with well-known and trusted security researchers and hosting companies.
For additional security we use Wordfence, a well-established plugin for WordPress which provides enhanced protection on the platform and is the most comprehensive security option available. Wordfence includes an endpoint firewall and malware scanner that were built from the ground up to protect WordPress. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures and malicious IP addresses it needs to keep your website safe.
WordFence (see above) also provides security through Two-factor Authentication, an additional login security feature which is used by banks, government agencies, and the military worldwide. It is one of the most secure forms of remote system authentication.
This method of signing into your website relies on something you know and something in your possession. That is why it is referred to as two-factor – because two factors are involved in authenticating you.
In this case you know your password and you are in possession of your mobile l phone or another authenticator device. If we can verify both, then we know that it’s okay to allow you to access your website. WordFence two-factor authentication is designed to be used mainly by site administrators and those with high level access, e.g. users with publisher access, but is now also available for other roles if you choose.
As one of the best and most preferred hosting providers on the market, SiteGround knows how important security is for our customers. This is why server security is one of their top priorities. Here is just a small part of the measures they have taken to keep their servers and the One Sure Thing website secure:
We use Dropbox for Business to store your information. Dropbox is built on security, compliance, and privacy and is designed with a secure, distributed infrastructure with multiple layers of protection to protect your data and empower IT administrators with tools that provide control and visibility. The robust information security management framework is designed to assess risks and build a culture of security at Dropbox.
We have added our own layer of protection on all the data being held in the database through an encryption layer.
Secure Sockets Layer (SSL) is a security protocol that provides privacy, authentication, and integrity to Internet communications.
SSL encrypts data that is transmitted across the web. This means that anyone who tries to intercept this data will only see a garbled mix of characters that is nearly impossible to decrypt. SSL initiates an authentication process called a handshake between two communicating devices to ensure that both devices are really who they claim to be.
SSL also digitally signs data in order to provide data integrity, verifying that the data is not tampered with before reaching its intended recipient. More information is available here.
Our strict internal procedures prevent any One Sure Thing employee or administrator from gaining access to your account, beyond a limited set of data necessary to help grant you access to your account (e.g. triggering confirmation emails) and restricting access to your account in urgent circumstances (e.g. limiting or removing a key holder’s access). One Sure Thing administrators can never see the plan information that you fill out or any documents that you upload. One Sure Thing logs and regularly audits all accesses to your account, whether by you, an administrator or your deputies.
