Website Security

DebtX, Inc., a SOC2 Type 2 audited firm, embraces a security-first culture, incorporating best practices through governance, business policies and procedures, personnel training, and deployment of advanced technology security infrastructure and tools.  We use the latest technology and techniques to ensure that unauthorized users cannot access secure site pages or proprietary or personal data. These technologies and techniques include:

  • TLS 256-bit encryption
  • Strong Password protection
  • Multifactor Authentication (MFA)
  • Okta SSO Credential Management
  • Repeated failure lockout
  • Automatic Session time-out
  • Secure firewalls
  • FIPS 140-2 Encryption of data at rest and in transit
  • Intrusion Detection Systems (IDS)

Supported Browsers

To ensure secure encrypted access to the website, we recommend our customers utilize the latest available version of one of the following web browsers:

  • Google Chrome
  • Microsoft Edge
  • Mozilla Firefox
  • Apple Safari

Applications accessed via DebtX.com require JavaScript be enabled in your browser. Failure to enable this feature will cause the website to operate incorrectly.

For instructions on how to enable JavaScript, please see your web browser’s documentation.

Pop ups

The DebtX website makes minimal use of “pop-up” windows. Certain pop-up blockers can prevent these windows from displaying properly. Please ensure that your pop-up blocker is configured to allow all pop-up windows from DebtX web pages.

Passwords

Your password is your private, secure “key” to enter DebtX. Never share your password with anyone and be sure to change it periodically. You can change your password at any time via the Profile page.

The password rules for the DebtX website are as follows:

  • Must be at least sixteen (16) characters long.
  • Must include at least three (3) of the following four (4) types of characters: a lower-case letter, an upper-case letter, a number, a special character (such as !@#$%^&*)
  • Must not include personal data such as first name, last name or the first part of the email address (firstpart@example.com)
  • Previous ten (10) passwords cannot be reused
  • User accounts are blocked after five (5) consecutive failed log on attempts.

Encryption

When a user accesses DebtX, all network traffic is encrypted via 256-bit SSL with FIPS 140-2 Level 3 encryption.

Cookies

DebtX uses cookies to store information temporarily about your session. It does not store any confidential information in the cookie file.

Support

If you have any problems or concerns related to DebtX, please contact support at 1‑617‑531‑3400.