Search
Close this search box.
Categories
Data Protection

ESG: 5 different views on sustainability

ANBIMA (Brazilian Association of Financial and Capital Market Entities) conducted a revealing study on the importance of sustainability and ESG in the financial market.

This study has shed light on the financial institutions’ maturity and understanding of ESG practices.

ANBIMA’s survey evidenced a great diversity of perspectives in the financial market regarding the theme of sustainability.

As a result, five different behavioral profiles were identified, ranging from financial institutions that are skeptical of ESG practices to those that put sustainable criteria at the heart of their business.

Five behavior patterns based on positioning and understanding of the topic

The survey conducted by ANBIMA aimed to understand the relevance of the sustainability issue in the participants’ view and how this perspective is reflected in their respective institutions.

This study involved more than 900 financial market institutions, including third-party asset managers, commercial, multiple, and investment banks, as well as brokerage houses, securities dealers, and others.

At the end of the study, five behavioral patterns were identified, indicating the possible paths that ESG and sustainability can take to be implemented more effectively in the financial market.

These profiles are: Distrustful, Distant, Initiated, Emerging, and Engaged.

1. Distrustful (4.2%): The view of sustainability is presented as a threat or misunderstanding and doubts about the topic arise.

Financial institutions that are suspicious of ESG practices and do not consider the topic as relevant to their business. In a general context, they present great difficulties in measuring and monitoring their impacts.

These institutions are skeptical of ESG practices and believe that they can have a negative impact on financial results.

Characteristics pointed out by ANBIMA:

  • They see sustainability as an obstacle to business development, which impacts the action of raising funds;
  • They almost always use subjective criteria to determine what sustainability is, sometimes trying to justify that their investments are ESG, without paying attention to the existing concepts;
  • The executives who are spokespersons for this discourse are distrustful, do not see value in ESG aspects, and often denote a lack of clarity on the subject;
  • They have not moved to implement concrete actions towards sustainability and have not inserted sustainable aspects into the institution’s commitments and processes.
2. Distant (35.5%): Relates the idea of sustainability to environmental issues

The company does not view the topic as relevant to business. The institutions that fit this profile believe that sustainability is important, but do not see it as relevant.

It is usually associated with environmental issues and has little to do with corporate and social governance.

Characteristics pointed out by ANBIMA:

  • They have a simplified view of the topic, perceiving sustainability as an exclusive commitment to the environment;
  • They link sustainability to environmental issues. Managers conclude that the topic is far removed from their business, especially when it comes to a small office that produces little waste, consumes few resources, and therefore has no relevant impact, negative or positive, on the planet;
  • They show a mismatch between actions and conceptualizations of sustainability. They have a low level of implementation/dissemination of sustainability concepts and may present inconsistencies in their statements.
3. Initiated (32.1%): Idea of sustainability related to environmental issues, but with concrete actions

These financial institutions are taking the first steps in implementing ESG practices, but do not yet consider them as central to their business. Sustainability is relevant, but not essential.

It continues to be associated with environmental issues, but this group shows a broader perception of the theme and a greater concern for risk management.

Characteristics pointed out by ANBIMA:

  • They also relate sustainability strictly to environmental issues, but they have concrete internal actions, because they see possibilities to cause transformation within the business, even if it is small;
  • They are structuring themselves in some way to include sustainability in the day to day of the institution and business;
  • They cite as examples of impactful actions the use of led light bulbs in the office, the installation of timers on faucets, the efficient use of air conditioning, and the practice of selective collection in the building;
  • They point to the recent digitalization of processes and signatures as an important contribution, which has led to a decrease in the use of printing-related resources. These are positive attitudes, but they do not go beyond the office environment or directly influence the company’s main activity.
4. Emerging (21.5%): Idea of sustainability as a broad commitment that encompasses environmental, social and governance areas

For this group, sustainability is an important issue and is linked to several aspects of the life of financial institutions.

Democratic management, respect for the law, and good relationships with stakeholders are fundamental to these companies.

Characteristics pointed out by ANBIMA:

  • They have a broader view of sustainability, embracing at least two pillars of the ESG, that is, they already perceive sustainability beyond caring for the environment;
  • They showed further development, with full implementation of one or more major items, and an adequate conceptualization of the sustainability issue;
  • They are more committed to social or corporate governance issues;
  • Sometimes they show that they are engaged in carrying out or financing philanthropic projects, mainly related to education and sports. In some cases, they encourage employees to participate in social work and volunteer initiatives;
  • Some institutions cite the benefits granted to employees as part of a social commitment;
  • The asset managers in this group generally have more advanced ESG investment analysis practices that encompass all three factors, and many have responsible investment and engagement policies with their investee companies. They also adhere to voluntary commitments.
Engaged (6.8%): Sustainability is part of the institution’s strategy, a fundamental commitment and also profitable

This group of institutions is aligned with ESG practices and understands sustainability as a factor for business growth.

The theme is discussed in the strategic decision-making processes, in the company’s goals, and in product definition.

Characteristics pointed out by ANBIMA:

  • They show full coherence between sustainable concepts and attitudes to work with sustainability;
  • They have fully implemented the main ESG practices and define themselves with phrases like: “When it comes to sustainability, everyone always wins;
  • ESG aspects permeate strategic decisions and require leadership to have transparent criteria about making, what kind of customers they serve, and with whom they partner;
  • They have a clear understanding that sustainability needs to compose the structure of the business itself, and not be practiced as projects apart from the organizational structure of the institution, such as philanthropic ones;
  • They have managed to turn sustainability into products and services that honor social, environmental, and governance commitments, such as credit lines for clean energy projects or green investment funds;
  • Such institutions are able to have a vision that goes beyond business and understand the global importance of sustainability;
  • Among management companies, they demonstrate more mature and comprehensive ESG analysis processes.

ANBIMA’s study also highlighted that the adoption of ESG practices in financial institutions goes far beyond a simple strategy.

The survey showed a notable difference between the attribution of importance for sustainability and the actual adoption of the measures in practice.

Importantly, cybersecurity is becoming increasingly important in the context of ESG practices.

Cyber risks have a significant impact on organizations and investing in cybersecurity is becoming increasingly relevant in ESG practices.

ESG goes far beyond a strategy for companies

The theme of sustainability has been growing in companies in recent years, however, the survey shows that there is a difference between the attribution of importance for sustainability and the adoption of sustainable actions in practice.

Many of the organizations that responded positively to the questions about perception and importance of the ESG theme indicated that they still do not have concrete actions within their institutions.

In fact, there is a growing movement among companies to focus on environmental, social, and governance factors. This focus is driven by several factors, including the need to deal with climate change, growing social inequality, and stricter government regulations.

Although some companies have been slow to adopt this change, there is a compelling argument that ESG is good for business.

Companies that focus on ESG tend to have better reputations, which can attract more customers and talent. They also tend to be more innovative and efficient, because they are constantly looking for new ways to improve their environmental and social impact.

In addition, companies with strong ESG practices generally enjoy lower costs because they are able to reduce waste and manage risk more effectively.

In summary, there are many good reasons for companies to focus on ESG. Those who do are likely to find that it is good both for their bottom line and for the world around them.

CipherTrust: investing in cybersecurity is relevant in ESG practices

Cybersecurity is becoming increasingly important for businesses, especially as the number of threats increases.

Cyber risks have a significant impact on organizations, potentially leading to disruption of operations, theft of confidential information, and even violation of regulations.

For these reasons, investing in cybersecurity is becoming increasingly relevant in ESG practices.

In addition, companies that invest in cybersecurity tend to be more resilient and less likely to suffer disruptions to their operations.

CipherTrust Discovery and Classification

 

O
CipherTrust
is the ideal solution against ransomware attacks. In a simple, comprehensive and effective way, the solution
CipherTrust
provides capabilities to secure and control access to databases, files, and containers – and can protect assets located in cloud, virtual, big data, and physical environments.

With CipherTrust, you can protect your company’s data and anonymize your sensitive assets, ensuring security for your company and avoiding future problems with data leakage.

About Eval

Eval has been developing projects in the financial, health, education, and industry segments for over 18 years. Since 2004, we have offered solutions for Authentication, Electronic and Digital Signature, and Data Protection. Currently, we are present in the main Brazilian banks, health institutions, schools and universities, and different industries.

With market recognized value, Eval’s solutions and services meet the highest regulatory standards for public and private organizations, such as SBIS, ITI, PCI DSS, and LGPD. In practice, we promote information security and compliance, increase companies’ operational efficiency, and reduce costs.

Innovate now, lead always: get to know Eval’s solutions and services and take your company to the next level.

Eval, safety is value.

Categories
Document and Contract Management

Is the signature of a witness in a digital contract still necessary?

In Brazil, there are still doubts about the need for witnesses in a digital contract to be valid.

In practice, in some cases it is believed that, as with physical contracts, witnesses are not required for a digital contract to be binding.

In other situations, it is argued that because it is a digital contract, that is, an electronic document, witnesses must be required for it to be considered legal.

In still other cases, it is held that the validity of a digital contract should depend on the jurisdiction in which it is made.

Let’s understand the whole context and clarify all these points.

What is a digital contract?

Digital contracts can be understood as business or agreement concluded by electronic means, that is, formed and signed by means of a mobile device or computer.

In Brazil, since 2006, it has been possible to make valid digital contracts under the law. Law 11.419/06 regulated the use of electronic signatures in the country and allowed contracts to be signed online – without the need for paper or pen.

Since then, digital contracts have been adopted in commercial and personal relationships, whether they be for buying and selling, renting, providing services, or contracting health insurance, among others.

The ease of contracting online is one of the main advantages of the digital contract. All you have to do is access the company’s website or application to do business, without the need to go to a physical store or face lines to contract a product or service.

Another positive point is that digital contracts are stored safely, preventing the loss of important documents. In addition, digital contracts can also be easily shared – just send an email to the contractor.

The role of witnesses when signing a contract

Witnesses are usually required for important contracts and documents, such as records of purchase and sale, rent, and even in the provision of services.

Its role is to make sure that the parties involved in signing the contract are aware of their rights and obligations.

In addition, the witnesses also guarantee that the contracting parties agree with the content of the contract and that there is no mistake or misunderstanding at the time of signing.

However, despite the common use of witnesses in business formalization, there is no mandatory requirement. According to article 104 of the Civil Code, the contract is valid as long as it meets three requirements:

  1. Be performed by a capable agent;
  2. It deals with an object that is lawful, possible, determined or determinable;
  3. Whether performed in a manner prescribed by law or not.

In other words, contracts are legally valid even if they have no witnesses. Even without their presence, the document represents a legal transaction.

However, one point of attention must be emphasized: the contract without witnesses cannot be transformed into an extrajudicial title. This, in practice, means that the parties involved will not be able to enforce the contract in court if one of the parties does not fulfill its duties.

Item III of article 784 of the Code of Civil Procedure states that “to be an extrajudicial enforcement instrument, the contract (in this context, called a private document) must be signed by the debtor and two witnesses”.

However, the requirement of witnesses for digital contracts is still a controversial subject and there is no consensus about this in Brazilian legislation. This is due to the fact that there is still no specific regulation on digital contracts in the country.

 

Conheça as vantagens da assinatura eletrônica para empresas brasileiras

 

Witnesses in digital contracts: is it necessary?

Is the signature of a witness in a digital contract still necessary? This is a very common doubt among people who want to contract products and services over the Internet.

Virtual contracts are, in fact, a reality in Brazil. The ease and practicality of contracting products and services online make this modality one of the most preferred by consumers.

The digital signature is a technological resource that guarantees the authenticity of the contract and the legal validity of the contractual clauses. However, for the contract to be valid, the parties involved in the negotiation must be identified and have a valid digital certificate.

In practical terms, just as witnesses are not required for physical contracts, they are not required for digital ones either. However, it is worth remembering that the electronic signature of a digital contract has the same legal value as the physical signature.

What does the law say about the role of witnesses when signing a digital contract?

According to the understanding adopted by the Third Panel of the
Superior Court of Justice (STJ)
, in the session of judgment of Special Appeal No. 1.495.920/DF, held on May 15, 2018, the “Electronic contract with digital signature, even without the presence of witnesses, is an enforceable title”.

For Justice Paulo de Tarso Sanseverino, the reporting justice on the appeal regarding the validity of the electronic contract, STJ case law holds that the list of extrajudicial enforcement instruments provided for in article 784 of the
Code of Civil Procedure
(CPC) is exhaustive.

“It is possible to enforce electronic contracts in which the signatures of two witnesses are absent, even though the hypothesis in question is not described by the legal provision”.

It is worth noting that in order for electronic contracts to have the same validity as contracts entered into physically, they must be validated by means of a digital certificate according to the standard required by the
Brazilian Public Key Infrastructure (ICP-Brazil)
.

The STJ also recognizes the inconvenience of requiring the signatures of two witnesses in the context of electronic contracts, whose greatest virtue “is to enable parties that are distant from each other to maintain contractual relations quickly and inexpensively.

So that the imposition of the requirements that are normally demanded by article 784, CPC, could lead to the invalidation of digital contracts, especially in the scope of commercial transactions.

Although there is no specific legislation regarding the requirement of witnesses when signing a digital contract, the position adopted by the STJ has been used as a basis to ensure the debureaucratization of contractual relations.

evalSign: an important tool in digital contract signing and validation

If you are looking for a fast, easy and secure way to sign documents and adopt an efficient digital workflow, evalSign is the perfect solution for you. The evalSign solution is more than just an electronic signature – it is a digital experience that makes signing documents simple and fast.

Offered by EVAL Technology, to optimize the process of electronically signing or collecting signatures from customers in different industries and company sizes, the evalSign solution is a complete solution for document approval workflows, advanced digital signatures, and document status tracking.

It allows you to electronically sign documents, anywhere and anytime, in a practical, secure, and dynamic way. Designed to quickly optimize the way companies deliver, review, approve, and sign their business documents. And since evalSign is a digital signature, you can be sure that your documents are safe and secure.

evalSign provides a fast and easy digital signature platform for sending, viewing, signing, and returning your electronic documents.

evalSign is the perfect solution for companies of all sizes

Whether you are a small business or a large corporation, evalSign can help you save time and money. In practice, there is no need to print out documents or make copies for each person.

And since evalSign is a digital signature, you can be sure that your documents are safe and secure.

In practice, the evalSign solution presents as practical benefits the management of large numbers of contracts and other documents:

1. improves document organization

By using the evalSign solution, you can organize your documents simply and quickly. You and your company have access to all your documents in one place – just log in to your account and you can access all your signed documents.

evalSign also offers the option of sharing signed documents with others, which makes document management even easier and faster.

2. Increases security in information exchange

With evalSign, you can be sure that your information is secure. This is because all documents are encrypted and stored on secure servers.

The solution offers the option of user authentication, which makes sharing documents even more secure and legally valid.

3. Optimizes processes

By using the evalSign solution, you can optimize your internal processes, and you can sign documents anywhere in the world, at any time – all you need is an Internet-enabled device.

You can create PDF documents and send them for signature with just a few clicks. This means that you no longer have to worry about sending paper documents for signature.

4. It is even more sustainable

By using the evalSign solution, you also contribute to a better world. This is because evalSign is a sustainable solution, which does not use paper or other materials to function.

In addition, the solution is fully digital, meaning no energy is wasted on printing and other paper-related activities.

5. Facilitates process management

By using evalSign, you also make it easier to manage your processes. With the solution you can monitor all signed documents in one place – just log in to your account to track the status of each document.

In addition, you can set up alerts so that you are notified as soon as a document is signed. This means that you don’t have to monitor processes manually.

6. It is a legally valid solution

By using the evalSign solution, you can also be sure that your signature is legally valid. This is because evalSign is ICP-Brasil certified, which means that its signature has the same legal validity as a conventional signature.

In practice, all documents are encrypted and stored on secure servers. This means that your subscription is protected against fraud and invasions of privacy.

For all these reasons, it is clear that evalSign is the ideal solution for companies of all sizes. With the solution, you can save time and money, and contribute to a better world. Try evalSign right now and see how your company can benefit!

If you are looking for a fast, easy and secure way to sign documents, evalSign is the perfect solution for you.

About Eval

EVAL has been developing projects in the financial, health, education and industry segments for over 18 years. Since 2004, we have offered Authentication, Electronic and Digital Signature and Data Protection solutions. Currently, we are present in the main Brazilian banks, health institutions, schools and universities, and different industries.

With value recognized by the market, EVAL’s solutions and services meet the highest regulatory standards of public and private organizations, such as SBIS, ITI, PCI DSS, and LGPD. In practice, we promote information security and compliance, increase companies’ operational efficiency, and reduce costs.

Innovate now, lead always: get to know Eval’s solutions and services and take your company to the next level.

Eval, safety is value.

Categories
Data Protection

All you need to know about image check clearing

For those who thought that the checkbook had been retired, know that it is now possible to clear checks by image within one business day.

In recent years, with the ease and modernization of resources such as credit cards, debit cards, and their famous “machines”, the use of checks in commerce has decreased.

However, the amount transacted is still quite high in relation to other means of payment. After all, its transactions totaled more than R$ 674 billion.

Given the volume of business that still happens with the use of checks, the Central Bank of Brazil and the Brazilian Federation of Banks (FEBRABAN) are constantly investing in improvements in the use of this resource, such as clearing checks by image.

You may not know or remember what the clearing of a check means

Explaining what a check or compensation means to the younger generation can be a challenge. But if you are connected to sectors like retail you might know what we are talking about.

A check is an order for payment on demand. The payee can either receive the check in cash directly at the branch where he or she maintains an account, or deposit it at another branch to have it cleared and credited to his or her account.

The Central Bank explains on its website that check clearing is the settling of accounts between financial institutions. It refers to checks deposited at establishments other than the drawees.

Therefore, the check is one more form of payment to be accepted in our financial system. It is believed to be over in the next few years, but let’s talk about its recent evolution.

Until recently, bank branches were responsible for clearing checks.

It took two or three days to convert the payment order into a balance on the current account, provided there were no problems related to authenticity or availability of balance in the issuer’s account for clearing.

The modernization of checks

As we have said, due to the importance of checks for the market, the Central Bank has sought to technologically innovate their use. Thus, there have been two developments in the clearing process for this means of payment.

Check clearing in 1 business day

The period for blocking the amount of the check cannot be longer than one business day, counting from the day after the deposit.

Check clearing happens by image

Current regulations dictate that check clearing be carried out solely by means of digital imaging and other electronic records.

To speed up clearing, the amounts represented by checks have been allowed to enter the market faster.

In this way you contribute to the economy through the purchase of products and services. However, for this to be possible, the compensation process would need to be modernized. Finally, this was done and regulated a few years ago.

The image check clearing system

The implementation of image-based check clearing has decreased process time and reduced transportation costs, thus eliminating the physical exchanges that used to take place.

Digital image clearing now electronically forwards the documents, signed using a digital certificate, instead of sending the checks to the originating banks, branches, and plazas.

The operation of image check clearing basically consists of:

  1. The bank that receives the check captures the information from the barcode and scans the document;
  2. After scanning, the file is digitally signed with ICP-Brasil certificates, and sent directly to the Clearing House. It processes it and sends the result to the source bank;
  3. In turn, the latter reads the information and responds to the modernized check clearing system, authorizing the payment;
  4. This whole process happens without the check having to leave the bank where it was delivered.

Image-based check clearing brings us to the concept of document capture, which represents one of several processes used to convert a physical document into another format, usually a digital representation.

The ability to capture documents and make their information available has become increasingly important for many reasons.

However, the main ones are regulatory compliance requirements, information security, and the competitive business environment.

And we cannot forget the fundamental point in this image check clearing process that consists in the use of digital certification, which validates the whole process and guarantees the reduction of cloning and theft cases, besides minimizing expenses with transportation and paper treatment.

Features and benefits of the image check clearing process

The solution for image check clearing must meet high performance requirements for processing incoming and outgoing batches and allow integration of the digital signature with centralized or branch capture systems.

And therefore, it must have features and benefits such as:

  • Management and Monitoring: Management of operation and transaction logs and identification of the state of each component and solution;
  • Stability: Used in the largest financial institutions in the country, being responsible for the processes of generation and validation of Digital Signatures;
  • Ease of integration;
  • Security and Interoperability according to ICP-Brazil standards and the COMPE Manual;
  • Agility with several mechanisms for optimizing the processing of Digital Signatures.

There are several advantages to modernizing the Image Check Clearing process.

For financial institutions, this means cost reduction, quality and productivity gains.

For consumers, the ease of the clearing process and the availability of money in reduced time, favoring even the country’s economy that starts to have money circulating in shorter terms.

About Eval

A EVAL está a mais de 18 anos desenvolvendo projetos nos segmentos financeiro, saúde, educação e indústria, Desde 2004, oferecemos soluções de Autenticação, Assinatura Eletrônica e Digital e Proteção de Dados. Atualmente, estamos presente nos principais bancos brasileiros, instituições de saúde, escolas e universidades, além de diferentes indústrias.

Com valor reconhecido pelo mercado, as soluções e serviços da EVAL atendem aos mais altos padrões regulatórios das organizações públicas e privadas, tais como o SBIS, ITI, PCI DSS, e a LGPD. Na prática, promovemos a segurança da informação e o compliance, o aumento da eficiência operacional das empresas, além da redução de custos.

Inove agora, lidere sempre: conheça as soluções e serviços da Eval e leve sua empresa para o próximo nível.

Eval, segurança é valor.

Categories
Data Protection

Data breach protection: Cybersecurity is not the focus

According to a recent study by Tanium, an American cybersecurity and systems management company, 79% of companies only invest in cybersecurity after a data breach. Which shows that data breach protection is not a priority for many businesses.

This is a worrying statistic, as it leaves companies vulnerable to attack and can cost millions of dollars.

However, there are things that organizations can do to strengthen cybersecurity defenses and prevent cybercriminals from gaining access to companies’ corporate systems.

Data breach protection: why should prevention be a priority in your company?

Data breaches are an increasingly common threat to businesses. With the increasing amount of information stored on corporate systems, cybercriminals have an even greater interest in carrying out attacks.

The consequences of a data breach can be severe. Digital criminals can steal confidential information or damage a company’s reputation.

Therefore, it is critical that data breach protection is a priority for your company.

Also according to the Tanium study, 92% of companies have suffered an attack or data breach, 73% in the last year alone.

The survey shows that criminal cyber activity continues to grow: 92% of respondents admitted to having suffered an attack or data breach, with almost three-quarters (73%) having done so during the past year.

In fact, the situation is getting worse for businesses, with more than two-thirds of respondents (69%) admitting that threats are on the rise and the expectation for 2022 is that there will be the highest number of attacks ever.

Thales 2021 Data Threat Report

Investment in cybersecurity: The best way to avoid a data breach

The best way to ensure protection against data breaches is to take preventive measures. Companies should invest in cybersecurity to strengthen their defenses against attacks.

There are several things that companies can do to protect their data and reduce the chances of a data breach:

Implement data breach protection measures for cyber security

Companies must implement data breach protection measures for their systems and data. These measures include using firewalls, encrypting data, and managing access to systems.

Companies should train their employees on the cybersecurity measures that should be adopted. Employees who are aware of the importance of cybersecurity are less likely to make mistakes that could compromise the security of company data.

Create a business continuity plan

Companies should also have a business continuity plan to ensure that business can continue after a data breach. The plan should include measures to restore lost data and ensure that employees can continue their work without problems.

In addition to the business continuity plan, companies should have a plan for communicating the data breach to customers and other stakeholders. This plan should include a protocol for notifying affected people, as well as a strategy for dealing with the media.

Keep the systems up to date with the latest software versions

This will allow you to benefit from the latest bug fixes and security updates, and make it harder for cybercriminals to exploit old vulnerabilities. Software updates usually include new and better features that make your systems more efficient.

Create a backup strategy to prevent data breaches

Backups are extremely important to recover lost data in the event of a data breach. Having regular backups will allow you to quickly get back to normal after an attack, without compromising business continuity.

Make sure that your backups are protected against unauthorized access and encrypted to prevent attackers from reading them.

Implement encryption solutions

This prevents hackers from accessing or changing your data, even if they manage to obtain it. Encryption is particularly useful for protecting sensitive information such as credit card numbers or financial details.

Encryption is useful for protecting backups and files in transit, such as e-mails. Make sure that all your communication tools are encrypted, including your e-mail server, instant messaging application, and VoIP tools.

Monitor network traffic to detect a data breach

This will allow you to detect suspicious activity on your network and take steps to correct it before it turns into a data breach. Monitoring network traffic can help identify weak points in your system that need to be fixed.

The Future of Data Security

Although cyber threats continue to evolve, companies are becoming more aware of the risks involved and are making investments in cyber security.

The survey showed that 79% of companies have already been a victim of a data breach and that they are willing to invest more in security to prevent future attacks.

Companies are also becoming more aware of the importance of training their employees on cybersecurity risks and how to avoid them.

Data security is a complex issue, but it is important that companies are aware of the risks involved and are willing to invest the time and money necessary to protect their systems.

CipherTrust: Your company’s cybersecurity against data breaches in real time and with secure encryption

O
CipherTrust
is the ideal solution against ransomware attacks. In a simple, comprehensive and effective way, the solution
CipherTrust
provides capabilities to secure and control access to databases, files, and containers – and can protect assets located in cloud, virtual, big data, and physical environments.

With CipherTrust, you can protect your company’s data and anonymize your sensitive assets, ensuring security for your company and avoiding future problems with data leakage.

To handle the complexity of where data is stored, CipherTrust Data Security Platform provides strong capabilities to protect and control access to sensitive data in databases, files, and containers. Specific technologies include:

CipherTrust Transparent Encryption

Encrypt data in on-premises, cloud, database, file, and Big Data environments with comprehensive access controls and detailed data access audit logging that can prevent the most malicious attacks.

CipherTrust Database Protection

It provides transparent column-level encryption of structured and confidential data that resides in databases such as credit card, social security numbers, national identification numbers, passwords, and e-mail addresses.

CipherTrust Application Data Protection

It offers APIs for developers to quickly add encryption and other cryptographic functions to their applications, while SecOps controls the encryption keys.

CipherTrust Tokenization

It offers application-level data tokenization services in two convenient solutions that provide customer flexibility – Token without Vault with dynamic policy-based data masking and Tokenization in Vault.

CipherTrust Batch Data Transformation

Provides static data masking services to remove sensitive information from production databases so that compliance and security issues are alleviated when sharing a database with a third party for analysis, testing, or other processing.

CipherTrust Manager

It centralizes keys, management policies, and data access for all CipherTrust Data Security Platform products and is available in FIPS 140-2 Level 3 compliant physical and virtual formats.

CipherTrust Cloud Key Manager

It offers its own key lifecycle management (BYOK) for many cloud infrastructure, platform, and software-as-a-service providers.

CipherTrust KMIP Server

It centralizes key management for the Key Management Interoperability Protocol (KMIP) commonly used in storage solutions.

CipherTrust TDE Key Manager

Centralizes key management for encryption found in Oracle, SQL and Always Encrypted SQL.

The portfolio of data protection products that make up the CipherTrust Data Security Platform solution enables companies to protect data at rest and in motion across the entire IT ecosystem and ensures that the keys to this information are always protected and only under your control.

It simplifies data security, improves operational efficiency, and accelerates compliance time. Regardless of where your data resides.

The CipherTrust platform ensures that your data is secure, with a wide range of proven, industry-leading products and solutions for deployment in data centers, either those managed by cloud service providers (CSPs) or managed service providers (MSPs), or as a cloud-based service managed by Thales, a leading security company.

Portfolio of tools that ensure data protection against data breaches

With data protection products from the CipherTrust Data Security Platform, your company can:

Strengthen security and compliance

In addition to ensuring investment in cybersecurity, CipherTrust data protection products and solutions address the demands of a range of security and privacy requirements, including electronic identification, authentication, and trust, Payment Card Industry Data Security Standard (PCI DSS), General Data Protection Law (LGPD)among other compliance requirements.

Optimizes team and resource efficiency in fighting data breaches

CipherTrust Data Security Platform offers the broadest support for data security use cases in the industry, with products designed to work together, a single line for global support, a proven track record of protecting against evolving threats, and the industry’s largest ecosystem of data security partnerships.

With a focus on ease of use, APIs for automation and responsive management, the CipherTrust Data Security Platform solution ensures your investment in cybersecurity by enabling your teams to quickly implement, secure and monitor the protection of your business.

In addition, professional services and partners are available for design, implementation, and training assistance to ensure fast and reliable implementations with minimal staff time.

Reduces total cost of ownership

CipherTrust Data Security Platform’s data protection portfolio offers a broad set of data security products and solutions that can be easily scaled, expanded for new use cases, and have a proven track record of protecting new and traditional technologies.

With CipherTrust Data Security Platform, companies can prepare their cybersecurity investment for the future while reducing operational costs and capital expenditures.

About EVAL

EVAL has been developing projects in the financial, health, education and industry segments for over 18 years. Since 2004, we have offered Authentication, Electronic and Digital Signature and Data Protection solutions. Currently, we are present in the main Brazilian banks, health institutions, schools and universities, and different industries.

With value recognized by the market, EVAL’s solutions and services meet the highest regulatory standards of public and private organizations, such as SBIS, ITI, PCI DSS, and LGPD. In practice, we promote information security and compliance, increase companies’ operational efficiency, and reduce costs.

Innovate now, lead always: get to know Eval’s solutions and services and take your company to the next level.

Eval safety is value.