Corporate Philosophy
Immutify is committed to the provision of high quality, value added services at a competitive price. We are committed to open source software, as part of a strategy of transparency, and it is central to our service offering that the client software for Immutify Secure Messaging is freely available in source form, so that it is open to inspection by anyone.
In deciding whether a secure messaging service is appropriate for any particular requirement it is essential that users of the service can understand exactly how it is implemented and what level of security it provides. The availability of source code for the client software enables any suitably qualified individual to see for themselves, exactly what happens "under the hood", and is a key part of our approach of Trust through Transparency.
We do not expect anyone to take anything on blind trust, in providing identity services we do not simply assert the identity of a particular user, rather we certify that some well defined and easily understood set of checks have been made. For example, knowing that a particular user has paid for our service with a credit card in a particular name, empowers other users to make their own determination as to the suitability of that user for their own purpose.
Various levels of user authentication can be provided for different requirements.
Privacy and Data Protection
During registration, Immutify collects various information about users, and records the various validation checks which are made to verify the user's identity. This information is not disclosed to any third party by Immutify, except where required by government or law enforcement agencies. Rather, the user is provided digital certificates which they can choose to present to people they wish to interact with.
When sending a secure message to another Immutify subscriber, a user can choose to provide only their unique Immutify ID (similar to a telephone number), or to add their certified name, or their name and address. The decision about how much personally identifying information to disclose, and to whom, remains with the user at all times.
Users can set preferences about how much identification they require from correspondents. A company providing financial services might for example, require that anyone corresponding with them provide a certified name and address, whereas a company sales enquiry service might choose to accept anonymous requests for information.
