Snapshot 4963
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security Portal Start your security review View & download sensitive information Overview Welcome to Ironclad's Security Portal. Our commitment to data privacy and security is embedded in every part of our business. Use this Security Portal to learn about our security posture and request access to our security documentation. Compliance CCPA CSA STAR CSA Trusted Cloud Provider GDPR HIPAA ISO/IEC 27001 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701 SOC 1 SOC 1 Type 2 SOC 2 ISO/IEC 27001 SoA Ironclad is reviewed and trusted by OneTrust Salesforce Mastercard L'Oréal DoorDash Zoom Dropbox Glassdoor Canva Documents REPORTSData Flow Diagram (DFD) REPORTSPentest Report COMPLIANCEGDPR COMPLIANCEHIPAA COMPLIANCEISO/IEC 27001 COMPLIANCEISO/IEC 27001 SoA COMPLIANCEISO/IEC 27701 COMPLIANCESOC 1 Type 2 COMPLIANCESOC 2 SELF-ASSESSMENTSCAIQ PRODUCT SECURITYAI Security and Governance PRODUCT SECURITYProduct Architecture Risk Profile Data Access Level Third Party Dependence Hosting Product Security AI Security and Governance Audit Logging Data Security View more Policies Open Source Policy Acceptable Use Policy Access Control Policy View more Reports Data Flow Diagram (DFD) Pentest Report Self-Assessments CAIQ Data Security Data Backups Data Deletion / Modification Encryption-at-rest View more App Security Application Penetration Testing Change Management CI/CD & Code Analysis View more AI AI Security AI Governance Legal Subprocessors Cyber Insurance Data Processing Agreement View more Data Privacy Cookies Data Breach Notifications Public Authority Requests View more Access Control Data Access Logging Password Security Infrastructure Status Monitoring Amazon Web Services Anti-DDoS View more Endpoint Security We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request. Network Security Disaster Recovery Test Reports Firewall Performance / Scalability View more Corporate Security Email Protection Employee Training HR Security Security Grades SecurityScorecard Ironcladapp.com ImmuniWeb Ironcladapp.com A Qualys SSL Labs Ironcladdapp.com A+ Security Portal Updates Ironclad is not impacted by the React2shell vulnerability Vulnerabilities Ironclad has conducted an internal review of the widespread vulnerability of CVE-2025-55182 also known as React2shell, and found we are not affected by this vulnerability. We will continue to monitor the vulnerability and impact and provide updates on our Security Portal. HelloSign/Dropbox Sign Incident Subprocessors Ironclad is investigating a security notification by one of our subprocessors, Dropbox. Dropbox features that were impacted were HelloSign/Dropbox Sign, which has resulted in the exposure of emails, usernames, phone numbers and hashed passwords for customers using their own HelloSign/Dropbox Sign accounts. Ironclad’s Legacy Signature solution leveraged HelloSign/Dropbox Sign, but the customer impact is limited to the exposure of signature request recipient data (e.g., names and emails). At this time, Dropbox has said that it has no reason to believe the signed documents themselves were exposed. Safeguarding the security and privacy of our customer's data is our top priority, and we are working diligently to assess the extent of the impact. Ironclad has already completed the immediate recommended actions posted by Dropbox to address any further concerns as of 5:45 pm PST on May 1st, 2024. We are also working on individual comms to our Legacy Signature customers. Ironclad’s new Signature solution, as well as our Docusign integration, or any other signature provider is NOT impacted by this incident. Ironclad will continue to monitor the situation and provide updates on our security portal as we progress through our investigation and learn more from HelloSign/Dropbox Sign. Ironclad’s Security Team Ironclad is not impacted by the Xz version 5.6.0 and 5.6.1 (CVE-2024-3094) vulnerability Vulnerabilities Ironclad is aware of the recent vulnerability affecting xz version 5.6.0 and 5.6.1 (CVE-2024-3094). We can confirm that our applications and infrastructure is not using the affected version and is not impacted. We are continuously monitoring the updates related to this vulnerability, and will share more details if needed here on our security portal. If you need help using this Security Portal, please contact us. Contact support If you think you may have discovered a vulnerability, please send us a note. Report issue