Security Statement

From Displayr
Jump to: navigation, search
  1. Authors of Displayr documents are required to have a unique user name and password that must be entered when a user first logs on.
  2. Passwords are stored using one-way encryption.
  3. "Cookies" are used to store information about users inside each user's web browser. The cookies do not include either the username or password of the user.
  4. Secure Sockets Layer (SSL) technology protects user information and uploaded data. This uses both server authentication and data encryption, ensuring that user data is safe, secure, and available only to authorized persons.
  5. Passwords and credit card information are always sent over secure 128-bit encrypted SSL connections.
  6. Our procedures for managing payments and account information are PCI-DSS compliant.
  7. Credit card information is not processed, stored or transmitted on our servers. It is handled directly by third-party payment processors who are PCI-DSS compliant.
  8. Displayr runs in data centers managed and operated by Microsoft. These geographically dispersed data centers comply with key industry standards, such as ISO/IEC 27001:2013, for security and reliability. More information is available from Microsoft.
  9. The latest patches are automatically applied to our public-facing servers.

Scanning is scanned quarterly by a third-party Approved Scanning Vendor (ASV) according to Payment Card Industry Data Security Standards (PCI DSS).

Reporting vulnerabilities

Vulnerabilities should be reported to, this address is monitored by our developers.

What we do if there is a security breach

  • Attempt to notify users electronically.
  • Review our policies and procedures.

See also

Security and R contains information about the security of R calculations.

Last Modified: 13 April 2017