Data and identity security is a top priority of ServiceLink and Acclaim Legal Solutions. All sensitive information in transit and at rest within the web application is secured in the following manner:

Web Traffic

All traffic from the user’s device to the ServiceLink web application is sent encrypted in transit via TLS over the HTTPS protocol.

Authentication

Users are authenticated in the ServiceLink web application via username/password combination. Passwords are encrypted in transit on the client side and sent over HTTPS (TLS) protocol to be matched against the user’s SHA1 encrypted password at rest on the ServiceLink server.

Companies also have the option to enable Multi-Factor Authentication (MFA). When this option is enabled, users must authenticate as above in addition to a one-time passcode sent to their stored email address or phone number (SMS).

File Upload

Files uploaded through the ServiceLink web application are sent from the user’s device to AWS S3 storage and secured in the following ways:

• In transit from the user’s device to AWS S3 (Amazon Web Services) via HTTPS
  1. This traffic is encrypted through the TLS protocol
• At rest on the AWS S3 platform via server-side encryption
  1. Server-side data is encrypted using the 256-bit Advanced Encryption Standard (AES-256)

Payment Information

Payment information is always encrypted at rest and in transit. Payment data is never stored in the ServiceLink web application but handled entirely by our payment partners through a secure iframe integration. Payment authentication is then conducted by a secure token handshake with the payment vendor.