Security Policy

Industry-standard (symmetric and asymmetric) encryption algorithms with appropriately sized keys are used to protect sensitive Customer Information. Information collected is protected by the Secure Sockets Layer (SSL) protocol, which prevents any sensitive information from being compromised. Web APIs and web pages are secured with High Assurance SSL certificates that support encryption algorithms with key lengths up to 256 bits and prohibit any key lengths shorter than 128 bits.

The Loft’s cloud infrastructure employs Multi-Factor Authentication for management operations.