• Server managed X.509 public keys, PKCS#8 private keys, SHA-512 with RSA digital signatures without expensive certificates
• 4096-bit RSA asymmetric keys, 256-bit Advanced Encryption Standard symmetric key
• BCrypt password hashing, 100 character pass phrases, optional Twilio Authy or Amazon text messaging (SMS) Two-Factor Authentication (2FA). Read more about which industries require 2FA.
• Web logins that limit password guessing and provide email notifications.
• XML Digital Signatures supports XAdES-BES per the European ETSI TS 101 903 v1.4.1 XML Advanced Electronic Signatures
• HTTPS, TLS, SMTP, IMAP, SMS (optional with Amazons SNS), NTP, DNS, SSH (public keys to avoid password guessing)
• Java (OpenJDK, JCE, JDBC, JSP/Servlets, JavaMail), HTML/XHTML, XML/DOM, CSS, JavaScript/JSON (Web 2.0 / Ajax)
• Accessibility is built-in based on recommendations from the Web Content Accessibility Guidelines (WCAG)
• Firewalls, NAT/port-forwarding
• PostgreSQL database, with parameterized query values to avoid injections
• Linux (Amazon, CentOS, RedHat), Windows
• Synopsys Tinfoil Web Security Scanner
• List of third-party software and licenses used in Yozons eSignForms

Many reasons why Yozons is uniquely qualified to earn your business

1. Each customer gets a unique, accessible, private, commercial-grade e-signature web site, including its own web site URL, which can be in its domain if desired (i.e. esign.yourdomain.com), and its own independent web application and database. Unlike other services, you are not just a user of a large third-party system that controls your data.
2. Our patent invented server-centric key creation, management and use for digital signatures with dynamic user authentication. If end-users are not using a digital certificate or managing their own keys and generating their own digital signatures, the software likely infringes this patent.
3. All of our customers are companies, be they departments in large corporations, or small businesses. We rarely deal directly with consumers and we do very little advertising as we work primarily through referrals and partners. We've relied on satisfied enterprises to drive our innovation and revenues since 2001 rather than depending on investor-fueled self-promotion and low quality freemium gimmicks.
4. Full customer branding: URL, logos, all email notifications, etc. We have found that only disreputable businesses intend to confuse and cover their tracks by hiding behind the service provider's brand. Also, when you entrust your business with another company's brand, you run the risk of virus infections inside your business as well as those you contract with with, in particular with phishing attacks.
5. Accessibility is built-in based on recommendations from the Web Content Accessibility Guidelines (WCAG)
6. Customers can start with our shared hosting service running on our servers that also runs the application of other customers; or they can upgrade to a private web hosting server (and have their own domain name and SSL cert) where their server is not shared with other customers; or they can run it on their own server in their data center. Flexible deployment is a key enterprise feature because companies often start a pilot with the shared hosting services, and then roll out big time on their own server. Or if they are like many big companies who have difficulty getting their IT to do these things in a timely manner, they can run it on one of our private web hosting servers. We can do this because each customer's deployment is fully independent, and thus we can backup their application and database and migrate it easily.
7. A single customer account can be used to manage multiple partners/channels or even their own customers (reseller). While those partners will share our customer's branding for the deployment itself, each of the other groups can send out documents/forms/emails that are branded to them (showing their logo, company name, address, phone, etc.).
8. All documents are fully encrypted when stored on disk.
9. The data inside the documents are independently stored (your data isn't locked inside a document) and are fully encrypted.
10. Transactions operate on packages that can contain one or more documents that flow between one or more parties, with custom actions (like sending an email, changing data values, sending notifications to back-end systems...) at any step.
11. Data on a form can be visible to one party, but masked for another; required for one party, but optional for another.
12. Documents in a package can be visible to one party, but not available to other parties, or the other party may only have view-only access.
13. Documents in a package can be automatically removed if they are not needed in all circumstances.
14. Parties can be skipped if they are not needed in all circumstances.
15. Custom reports can be created that show selected data from your forms, and that data can be exported as Excel or CSV files for further analysis or integration. These reports also allow users to keep track of the status of all transactions.
16. We charge on a database size license, so there's no concern for per-transaction fees, or per-document fees, or per-user fees. One heavy user or 10 light users only pay based on how much data/documents they store in their database.
17. All of our customers get all of the features available. There are no extra fees to make use of advanced features.
18. We are fully web-based in that all of the documents are native HTML (standard XHTML actually). This allows it to render correctly and natively on any browser on any device without plug-ins. Also, such documents can even be read by humans in their native format (for any extreme legal challenge), unlike a Word or PDF file. HTML files are also dramatically smaller in size.
19. Because documents that are signed are in HTML, we are able to capture the exact HTML sent to the user when they sign, giving us the ability to digitally sign that document precisely as they saw it. Of course, our customers can convert and combine HTML documents to PDFs on the fly, such as if they email or want to print a set of documents or store them in a legacy document management system. We even support TIFF exports.
20. Our audit trail consists of digitally sign documents and digitally signed data (the separately stored XML data that populates the form fields) on each step from start to finish. Of course, it also includes traditional activity logs that record user's IP address, web browser type, accurate timestamps, etc.
21. Our forte belongs to customers who repeatedly sign the same type of document/form as they need to set up the document once, and then all of their users can use it as frequently as necessary without having to worry about any errors in the contents of those documents.
22. We are able to deliver an ever increasing number of pre-built forms/documents so customers can make use of them out of the box, yet they can also tweak them as necessary for their individual needs. We already offer the federal W-4, I-9, HIPAA-compliant Business Associate Agreement, etc. And we also offer a flexible "build your own one-time agreement" so a user can just type in a contract (or copy it from Word) and get a signature on it without having to program anything. We can offer pre-built forms because the document and related configuration can be exported as XML so it can be imported by others.
23. All of the software programming for custom forms and process flow is done using the web application itself. No traditional programming is necessary. Yet you can change field values, perform calculations and do conditional logic.
24. We offer a simple Test and Production version control system. This allows documents to be created or updated and tested without impacting production transactions, and when ready, they can be put into production without any downtime. It also allows you to run Test transactions without cluttering/mixing such transactions with real transactions.
25. We offer a To Do list that shows all transactions pending for a specific user or a group of users.
26. Every email sent is recorded, and if there's a bounce or reply, it is automatically correlated with the original email. Every Short Message Service (SMS) text message sent is recorded.
27. Our user management allows for unlimited numbers of groups to be created, each containing one or more users. This also allows a manager, via the reports, to have access to all transactions of the people he/she manages, while allowing regular users only the ability to see their own transactions.
28. Our digital signatures are based on 4096-bit RSA key pairs (server-generated and controlled per our patent), SHA-512 and XML Digital Signatures. Nobody is more powerful and secure in terms of the keys and the hashing.
29. Our data encryption uses 256-bit AES so even if you walk away with our disk drives or a copy of a backup, the data is secure.
30. Our users can choose pass phrases up to 100 characters (letters, numbers, special characters, etc.), and we never store the password in our system so it can never be leaked. For added protection, Twilio's Authy can be enabled as an option for Two-Factor Authentication (2FA).