Secure Mail

#A signature that holds up to scrutiny

Signing can happen at two levels: an electronic signature given by typing one's name, or strong bank authentication, where the signer's identity is verified using their online banking credentials. There can be multiple signers — all at once, or in a set order, in which case the invitation is sent automatically to the next person once the previous one has signed. Rules can also be set for signers — for example, that a guardian must be of legal age and a different person from the minor to whom the consent applies.

Once everyone has signed, the document is sealed: each signer's name and timestamp are stamped onto the document, together with a signature certificate recording the name, signing method, IP address, timestamp and consent text. A SHA-256 fingerprint is calculated for the entire document, tied precisely to the document template and version used at the time of signing. The finished PDF is written once and cannot be sealed again — and every party receives a copy by email.

#Security without the fine print

Messages and attachments are encrypted at rest with AES-256 and in transit with TLS. The one-time code is six digits, single-use, and locks after five incorrect attempts. The personal link is randomly generated, valid for 30 days, and is cleared from the browser's address bar as soon as it's opened. Attachments can be up to 50 megabytes per file — PDFs, Word and Excel files, images and ZIP packages.

#The same secure mail we use ourselves

Secure Mail isn't a bolted-on add-on — it's the same infrastructure Truster uses for its own sensitive deliveries: employment contracts are signed through it, a minor employee's guardian's consent is requested with it, and company reports and certificates signed by accountants are delivered the same way. When a service holds up to our own contract and regulatory processes every day, it will hold up for you too.