lifeIMAGE employs encryption strategies that follow or surpass industry best practices. For data in transit, lifeIMAGE uses Transport Layer Security (TLS)/Secure Sockets Layer (SSLv3) with 2048-bit encryption keys and up to AES 256-bit encryption for data traveling to the lifeIMAGE cloud service. Two-way, mutually authenticated TLS/SSLv3 is used for data traveling between the Enterprise LILA (lifeIMAGE Local App) and a lifeIMAGE cloud service. TLS/SSLv3 helps to secure transmitted data using encryption. TLS/SSLv3 also authenticates servers and, optionally, authenticates clients to prove the identities of parties engaged in secure communication. In addition to protecting against data disclosure, the TLS/SSLv3 security protocol can be used to help protect against masquerade attacks, man-in-the-middle or bucket brigade attacks, rollback attacks, and replay attacks.
Additionally, data that resides in the lifeIMAGE cloud is secured with customer-dedicated encryption keys. These encryption keys ensure that customer data that lives within the lifeIMAGE cloud is segregated and protected to prevent unauthorized exposure of PHI.