Ensure the highest standard of cybersecurity for your data. With ANSSI CSPN certification, HDS or SecNumcloud hosting, your access and files are safe.
The entire LockSelf suite is CSPN certified by ANSSI (version 2.2), guaranteeing the robustness of the encryption mechanisms used. On the hosting side, we offer HDS or SecNumCloud certified solutions.
As a secure vault dedicated to protecting sensitive business data, the LockSelf suite implements multiple security functions to guarantee the confidentiality of your vault’s content.
LockSelf facilitates your compliance with top cybersecurity standards (NIS2, DORA, ISO 27001...). Encryption, traceability and access governance combined in a single solution to meet the most stringent requirements.
LockSelf is the only French cybersecurity suite to have been awarded CSPN certification by ANSSI, the reference authority for IT security.
This certification guarantees that our solutions have passed rigorous assessments and audits, ensuring the best protection for your sensitive data.
The password defined by the user when creating their account (used to sign in to LockSelf) is stored in the database after being hashed.
The PIN code defined by the user at account creation is not stored in the database; it is only used during RSA key generation to encrypt the user's private key before it is stored in the database.
LockPass is a LockSelf-integrated tool for storing and securing a login/password identifier pair. Passwords are asymmetrically encrypted using each user's RSA key pair.
Files managed via LockTransfer are symmetrically encrypted in AES256 CBC using a passphrase and the sender’s password.
All network exchanges between the LockSelf server and clients connected to it use the HTTPS protocol, with TLS 1.2 as a minimum.
The use of HSTS allows you to force HTTPS to be used, and to block any communication using HTTP or a self-signed certificate.
Each LockSelf user must authenticate through two‑factor authentication to access their data. The second step relies on decrypting the user’s RSA private key to validate access.
LockSelf facilitates your compliance with cybersecurity standards such as NIS2, DORA or ISO 27001, by combining advanced encryption, centralized management of user rights and transparent tracking of actions, essential for meeting the most stringent regulatory requirements and validating your compliance audits.
This proactive approach enables you to anticipate and meet your legal obligations, while securing your sensitive data and guaranteeing business continuity in an increasingly demanding cyber environment.
We were looking for a qualified, certified product that had obtained a favorable opinion from the ANSSI, a requirement under the RGS (General Security Framework).
LockSelf's ANSSI certification and the fact that the tool is 100% French reassured the various stakeholders as to how sensitive information would be retrieved and stored.
Your ANSSI certification and the high level of encryption associated with it are a clear advantage, both in terms of security and sales to our customers.
ANSSI CSPN certification and sovereign hosting provide an additional guarantee of compliance and confidence, particularly in the face of growing demands for data sovereignty and security.
The LockSelf digital vault is the result of careful consideration of the integrity of the data entrusted to us.
Each user benefits from a unique 2048-bit RSA key pair generated at account creation, by a call to the OpenSSL precompiled package.
The private key of this generated pair is encrypted prior to database storage in AES 256 CBC using salt and including, among other things, the PIN code chosen by the customer corresponding to the second authentication step at LockSelf.
Passwords and sensitive data are thus protected by asymmetric encryption coupled with two-factor authentication, ensuring the confidentiality and integrity of information at every stage of the data lifecycle.
