Cryptshare has a strong encryption and will help you to be compliant with standards like GDPR/DSGVO/AVG, NTA7516, HIPAA or CCPA.
Our development approach is to continuously develop and improve our product Cryptshare.
Customers benefit from this model because they are always entitled to the latest and best version of Cryptshare.
A certification of a product with the scope of Cryptshare would take several months to complete and would only apply to exactly the version that has been certified.
Any changes to that version would require a re-certification of parts or even of the complete solution, causing similar effort.
As Cryptshare is a web application, we provide minor fixes and updates on a regular basis. This is done to react on recent security threats becoming known in technology components that we use as well as to react on new developments like updated browser versions or technologies. Unfortunately, this frequent update policy is contradictory to a certification approach. Apart from the implications on our release cycles, the cost for a continuous recertification cycle would demand us to increase license costs significantly.
As a result, Cryptshare is currently not certified at any level of the Common Criteria.
We have customers in many security-relevant industries such as banking, insurance, public sector, utilities, defense etc. who are using Cryptshare after having assessed product security on their own. In addition to internal automated and manual security reviews, we also encourage all our customers to share feedback from security checks and assessments with us to constantly keep product security on a high level.
We do not regard security as a one-time achievement, but as a constant process.