Security

This folder is designed to hold FAQ's related to security

Are you ready for Two-Factor authentication with Privia?
If you have Privia version 5.10 or higher, your system administrator can enable two-factor authentication.  Signing in to your account will work a little d...
Wed, Apr 7, 2021 at 10:38 AM
How does Privia prevent Cross Site Scripting (XSS) and SQL Injection?
Every release of Privia is put through a rigorous test to verify that Cross-Site Scripting and SQL Injection vulnerabilities are blocked by the application...
Fri, Mar 17, 2017 at 2:32 PM
How does Privia protect against Man-in-the-middle attacks?
From the start Privia has incorporated a handshake protocol for both the web client and the installed windows client to prevent man-in-the-middle attacks. ...
Fri, Mar 17, 2017 at 2:32 PM
What is TLS 1.2 encryption?
Privia servers use TLS 1.2 by default and disable the older, and vulnerable, SSL technology. All communications between the server and both the web and ins...
Fri, Mar 17, 2017 at 2:34 PM
What is Non-reversible Password encryption, and does Privia use it?
All passwords for end users are stored in non-reversible encryption and are not stored in the primary Privia database. The cryptographic technique uses the...
Fri, Mar 17, 2017 at 2:36 PM
SOX compliant authentication controls
Access to Privia accounts is controlled with three systems that can be separated to 3 different groups of control. For a user to log onto a Privia server,...
Fri, Mar 17, 2017 at 2:38 PM
Outlook 365 fraud detection on Privia Email notifications
When your Privia server sends notification, it sends them on behalf of the originator of the notification.  This can trigger anti-spoofing or fraud-detectio...
Fri, Apr 7, 2017 at 3:09 PM
Password security policy
Privia utilizes the Windows encryption service to store passwords in non-reversible encrypted format keyed to the unique certificate of a Windows server. The...
Fri, Sep 22, 2017 at 2:29 PM
Can customers have access to Privia logs
All transactions between the Privia Client or Web browser are logged both on the server and on the client. Logging is done in three locations: The client...
Fri, Sep 22, 2017 at 2:37 PM
Certifications for Privia LLC hosted servers
Privia LLC hosts all on-demand customer servers with an Enterprise Cloud vendor.  The cloud provider meets industry-specific compliance standards, such as H...
Fri, Oct 27, 2017 at 2:19 PM