At Executor’s Resource Inc. we are dedicated to providing you the highest quality services in the most secure manner. Our business is intent on bringing you the most technically advanced and secure solutions to help you organize and settle your estates.
The security of our services has been a key design principal from day one and remains the most important aspect of our services. To this end the following steps have been taken to ensure the trust between our relationships and your privacy.
Digital Website Certificate:
A digital certificate is an electronic fingerprint that verifies the identity of a web site to be true and accurate. Digital certificates conform to a world wide standard called X.509 and are based on public key encryption technology and the idea of federated trust. Digital certificates provide a mechanism to verify when a user logs into the service, they are logging into the real service and not a spoofed site designed to steal passwords or security tokens. Executor’s Resource uses a 128 bit key length for its Digital Certificate.
Secure Socket Layer (SSL):
SSL is a session based encryption mechanism based on private key encryption technology that is commonly used for ensuring the security of messages transmitted over the Internet. Using SSL a user can access their account from any browser connected to the Internet knowing that all of the information sent to or retrieved from their account will be encrypted. The encryption provided by SSL is so secure that it would take a dedicated attacker many millions of dollars in computer time to decrypt the message.
At Executor’s Resource Inc. we use SSL encryption from the moment you login until the moment you logout. This will ensure that the communications between your internet browser and our systems are secured with 128-bit, X.509 complaint, encryption. This secure communication mechanism will prevent eavesdropping, sniffing, tampering and message forgery. On most internet browsers you will notice a padlock icon (<icon>) appear at the bottom when active.
Executor's Resource has chosen VeriSign as its SSL Certificate provider. You can learn more about VeriSign here
Most, about 99.3%, web browsers will support this level of SSL automatically without your intervention or configuration.
Account Creation and Management:
In order to use our services at Executor’s Resource Inc. you will be required to create an account with us. This will require you to share some amount of personal information (username, password, email address) with us in order to establish your account. Once your account is established you will be able to change and add to your personal information. You can terminate your account at any time. Executor’s Resource Inc. may use techniques to ensure the viability of the username and password including; automatic password change on failed login attempts, never distributing passwords even back to the user, sending forgotten usernames only to the registered user's email account, and having expiring web links sent to the user's email account for the purpose of resetting a lost password.
Authentication and Two Factor Authentication:
When you access our services you will be asked to authenticate yourself with our servers. This will require you to submit a username and password, previously created by yourself during account setup. Please note that the service automatically times out after 15 minutes of inactivity and requires you to re-authenticate yourself. This helps protect you from unwanted intrusions.
When detailed personal financial information (i.e. account #’s, currency amounts, etc.) is accessed an additional authentication step is required. This additional layer of security is used to control access to your sensitive information. You will be able to modify and control this second level of authentication in your user profile. Please note that the second level of authentication automatically times out after 5 minutes of inactivity and requires you to re-authenticate yourself for this level of information.
Service Design:
Executor’s Resource Inc. has taken special care in designing the software that provides the services you access to be as secure as possible. By using distributed multi-tier systems the risk of intrusion is greatly reduced and the quality of service to you increased. As such our middleware is ACID compliant and has the following characteristics:
Atomicity
A transaction allows for the grouping of one or more changes to tables and rows in the database to form an atomic or indivisible operation. That is, either all of the changes occur or none of them do. If for any reason the transaction cannot be completed, everything this transaction changed can be restored to the state it was in prior to the start of the transaction via a rollback operation.
Consistency
Transactions always operate on a consistent view of the data and when they end always leave the data in a consistent state. Data may be said to be consistent as long as it conforms to a set of invariants, such as no two rows in the customer table have the same customer id and all orders have an associated customer row. While a transaction executes these invariants may be violated, but no other transaction will be allowed to see these inconsistencies, and all such inconsistencies will have been eliminated by the time the transaction ends.
Isolation
To a given transaction, it should appear as though it is running all by itself on the database. The effects of concurrently running transactions are invisible to this transaction, and the effects of this transaction are invisible to others until the transaction is committed.
Durability
Once a transaction is committed, its effects are guaranteed to persist even in the event of subsequent system failures. Until the transaction commits, not only are any changes made by that transaction not durable, but are guaranteed not to persist in the face of a system failure, as crash recovery will rollback their effects.
With the use of firewalls, routers and networks Executor’s Resource Inc. is able to segment parts of the system quickly and isolate violations as well as enabling federal agents to pinpoint and locate the sources of these violations.
Secure Storage:
The information you enter into our system is stored on a physical disk in our secure facility. Executor’s Resource Inc. maintains strict safeguards to protect your personal information. Our servers are encrypted with modern commercial grade cryptography with keys greater than 128 bit so that your information can only be accessed by you and not contaminated with other user’s information. This results in useless information for any attacker accessing the raw data.
Secure Facilities:
Access to our servers and their consoles are limited to authorized personnel of the data center. Access is restricted through locked cages in rooms accessible only through access cards in a facility that is secured with alarms, and remains continuously monitored. Our servers and your data are located in the United States of America. Our hosting environment is also certified as a SAS 70 Type II. You can learn more about what this means here.
Vendors and Partners:
Executor’s Resource Inc. partners with many companies to deliver you a more complete solution and in doing so establishes a high level of security through electronic and physical means. We continue to work with our resellers and partners to protect the security and privacy of our user’s information.
We may distribute aggregate data about our customers to our partners with the intent of providing you with a higher quality of service.
Employee and Contractor Access to Information:
Executor’s Resource Inc. limits access to you personal information to those employees who we reasonably believe need to come into contact with that information to provide products or services to you or in order to do their jobs.
Education and Training for Employees:
Executor’s Resource Inc. has implemented a company-wide education and training program about security that is required of every employee.
Reporting incidents to Executor’s Resource Inc.:
- If you believe your Executor’s Resource Inc. account has been compromised, please report the incident by sending us an email at support@executorsresource.com.
- If you have been contacted by someone about your account asking for a password, birth date or other personal information, please forward the email to support@executorsresource.com
- If you are a member of the security community and need to report a technical vulnerability, contact: support@executorsresource.com.
Reporting incidents to Law Enforcement Agencies:
In the event that you believe that your personal safety is at risk or if you believe that you may be the victim of identity theft or other illegal conduct, please contact the appropriate federal, state or local law enforcement agencies directly.
Return to Top