


nVault's all-encompassing security concept uses the latest encryption
software combined with tried-and-tested authorization processes. This
combination provides nVault members with a high degree of security,
while ensuring that our service is as user-friendly as possible. nVault
is hosted in a secure data center operated by one of the largest providers
of Internet services in the world.

Our security design and implementation involves several security components,
including firewalls, authentication, encryption and timed log outs to
ensure the confidentiality of your personal information. The design and
security infrastructure meets "world-class" standards for information
security and enables nVault to accept the risks associated with
safekeeping of member information over the Internet.

During the on-line sessions, members are authenticated by using user id's
and passwords. Members can ensure that they are actually dealing with
nVault, and not a malicious third party that might be intercepting
information, by examining a secured page's certificate. You may click
on the lock symbol displayed at the bottom of your screen when you establish
a secure connection to our service (note that the information page you
are reading right now is not part of the secured area of our service.).
Our certificate is issued by Verisign; a leading certificate authority
and a trusted third party that issues certificates that can be used by
individuals or organizations to verify our identity or credentials. Our
certificate contains references to our name, public key, an expiration
date, a serial number and identifying information about the certificate
authority including the digital signature.

The centerpiece in our security implementation is the encryption technology
provided by Entrust Technologies - some of the most advanced information
security that is commercially available. Very similar to secret code,
encryption takes your sensitive data like your password and card numbers
and uses complex mathematical equations called algorithms to scramble
the information into an unreadable format. The data is also stored in
the encrypted form and as a result no one can read the information without
having a key to unscramble the information to its original form.

Information security is a core competency of Entrust Technologies, a company
created by Nortel Networks and widely regarded as a leader in cryptographic
security. Entrust has a suite of established information security products
licensed by major information technology companies, including IBM, Lotus,
Hewlett-Packard, Tandem/Atalla, Netscape, DEC, etc. Entrust technology
is endorsed by the Canadian Federal Government, who are also actively
acquiring and implementing Entrust products; as well, Entrust is also
being adopted within the US by both government and industry, including
financial services organizations.

We are constantly evaluating the latest security technologies and upgrade
our systems whenever relevant improvements become available. We are always
monitoring our systems to prevent any potential problems that could compromise
security or privacy.
|