This diagram shows the different components of Addo Sign and how they communicate. The main components are hosted inside IT-Relation, where they run in a closed environment.

Communication from IT-Relation

All communication from IT-Relation to external parties is encrypted using X.509 certificates. X.509 is a standard for Public Key Infrastructure (PKI). A certificate issued by an authorized organization called Certificate Authority (CA) which is responsible for confirmation of identity. The certificate contains two keys for asymmetric encryption, a public key and a private key. The certificate owner is the only one who has access to the private key used for encryption. The encrypted content can be decrypted only with the matching public key. By relying on the certificate issuer, the content and sender’s identity is ensured.

Communication with Nets and e-Boks

The communication with Nets and e-Boks uses a VOCES certificate issued by Nets. A VOCES is a merchant certificate that represents a business. It is used to secure communication between different parties. 

E-mails

Delivery of e-mails to a recipient requires encryption of attachments as they may contain sensitive personal information. The attached documents are encrypted up to 2048-bit AES (Advanced Encryption Standard).
Addo Sign supports encryption using TLS v1.2. TLS ensures a safe and encrypted connection when using Addo Sign to send email to your recipients.