Military-Grade Security Features

The features that make us the most secure Virtual Data Room provider in India have been explained in detail, with every security feature designed to protect your most sensitive documents.

OTP-Based Authentication

Strengthening Access Control

A one-time password (OTP) is the cornerstone of secure access control. With Right2Data, every user login attempt requires a unique, time-sensitive OTP sent via email or SMS using their login credentials. The approach drastically reduces the risks of unauthorized access by ensuring that even if login credentials are compromised, hackers cannot access the documents without the dynamically generated code.

Key Benefits

  • It provides time-sensitive Security as the OTPs provided typically expire within 60-120 seconds, making them useless if intercepted.
  • Unlike static passwords, OTPs cannot be reused or predicted, mitigating password theft attacks.
  • Despite the heightened security, OTP prompts are straightforward for legitimate users, balancing security and usability with robust protection.
  • Right2Data places a proactive barrier against brute force attacks and credential-stuffing attacks, reinforcing its reputation as the most secure VDR provider in India.

Double Authentication (2FA)

Adding a Second Layer of Authentication

While OTP provides significant protection against any authentication breaches, if required, Right2Data further enhances user verification through double-door security checks. By combining knowledge-based and possession-based factors, double authentication drastically reduces the chances of unauthorized entry, especially in scenarios where passwords are weak or recycled.

Key Benefits

  • The administrators can mandate specific two-factor authentication channels by enabling OTP and Aadhar card numbers as mandatory authentication requirements.
  • It evaluates risk parameters like new devices or unusual IPs and may enforce two-factor authentication more strictly if anomalies are detected.
  • Offers seamless integration, allowing end users to experience minimal friction while enjoying robust protection, as Right2Data supports popular authenticator apps in addition to OTP.
  • This multi-layer authentication ensures that even if a malicious actor acquires credentials, they still face an insurmountable hurdle in the absence of the second authentication factor.

Viewer Selfie

Verifying Document Access in Real Time

The innovative feature, like the Viewer selfie, sets Right2Data apart by verifying the identity of users accessing sensitive documents. When entering the VDR session, users are prompted to capture a quick selfie using their webcam or mobile device camera, notifying the user that this step is a mandate to access the data in the data room they are invited to. The platform’s facial recognition algorithm then cross-references this image and stores this image to keep records of the person accessing the data to confirm the authenticity of the viewer. The captured image is then used to authenticate the user by the administrator of the data room to identify them.

Key Benefits

  • Prevents users from sharing their accounts with unauthorized users. The users cannot piggyback on legitimate credentials without matching the authorized user’s facial profile.
  • Provides a shred of audit-ready evidence by keeping each selfie time-stamped and stored securely, creating an indisputable log entry that ties a human face to the download or view action.
  • It also helps to keep user accountability by storing the data of every access attempt, photographing, encouraging responsible use of documents, and reducing data leakage risk.

Geo-Tagging

Capturing Location Metadata for Every Access

It is the process of recording the geographical coordinates (latitudes and longitudes ) of the user's device whenever they log in to the virtual data room or open a document in the data room. Right2Data captures this location metadata and ties it to each action ( View, Print, Download ).

Key Benefits

  • The admins can detect access attempts from unexpected or suspicious locations.
  • Certain regulatory frameworks mandate location-based logging, and geo-tagging ensures adherence to such requirements (eg, GDPR, ISO 27001). 
  • In the event of leaks and breaches, geo-tag data assists in tracing the physical location of the data breach, helping in forensic analysis, making the investigation easier and faster.

Geo-Fencing

Enforcing Region-based Access Restrictions

Geo-fencing takes a proactive approach by defining perimeters within which a data room’s documents can be accessed. Right2Data’s geo-fencing allows the administrator to configure “Whitelisted” geographical coordinates or zones down to a country, city, or business campus area, where the document interaction is permissible. If the viewer attempts to access the Virtual data room outside of these boundaries, access is automatically denied.

Key Benefits

  • It aligns with the regulatory requirements of data residency laws by keeping the data within the national boundaries and preventing access beyond the set parameters. Geo-fencing automatically enforces these laws.
  • Limiting access to known zones like corporate headquarters, business campuses, and approved remote locations, enterprises lower the chances of intrusion from high-risk geographies.
  • Admins can define multiple fences, aligning security policies with the business needs.

Audit Trail

Maintaining an Immutable Record of All Actions

The backbone of any secure virtual data room (VDR) is a comprehensive audit trail. Right2Data meticulously logs every action from administrators' login, viewers' log in and their failed authentication attempts to document views, prints, and downloads. 

Key Benefits

  • The audit trail keeps the exact date and time (to the second) of each action, using Indian Standard Time (IST).
  • It provides the details of the viewer with their login details like email, phone number, role, and the name of the document accessed, along with the duration.
  • It also provides the action type (view, print, and download) in the audit trail report.
  • The file name, version number, folder name, and location of the viewer at the time of access are provided.
  • The Geotagging feature provides the latitude and longitude details with IP address.

Advanced Security & Control Features

Additional layers of protection and control mechanisms to ensure complete document security and compliance.

Activity Tracker

Maintaining an Immutable Record of All Actions

Beyond the static logging, our platform's activity tracker provides administrators with a real-time dashboard of all ongoing VDR activity. This feature provides the details of the viewer's activity of accessing the data, including the number of times which particular document was accessed and for how long the user accessed it. 

  • Monitor the document view times and for how long? Which user is displayed?
  • The admins can track the unusual downloads, print, and view the activity of a user by looking at the period of activity tracker records and flag a potential data exfiltration.
  • The administrators can visualize the document engagement and point out which files have generated the most attention, helping prioritize reviews during due diligence or audits.
Activity Tracker - Right2Data

Watermark

Dynamic, Forensic-Grade Deterrents

Dynamic watermarking is one of the most powerful deterrents against unauthorized distribution of documents. Right2Data implements watermarks directly on each document page, embedding user-specific details. The administrator's email address is automatically added as a watermark to the documents in a way that is difficult to remove without damaging the file. The Watermarks can be added as per the user's requirements/preferences.

  • Real-time watermark injection helps generate watermarks on the fly when a document is accessed, ensuring each version is unique.
  • Watermark dynamically shifts positions on each page to prevent cropping or screenshot-based attacks.
  • The watermarks are transparently overlayed, making the document visible enough to deter misuse maintaining the readability of the documents.
  • Even if the viewer downloads the files, any exported PDF carries the visible watermark, making it trivial to trace leaks back to the responsible user.
Watermark - Right2Data

Ready to secure your sensitive documents?

Book a demo with us. We are happy to help.

Request a demo

View Only

Restricting Actions to Read Only

This feature is the simplest way to deploy and prevent document leakage by just restricting the users to reading. The view-only permission gives them access to the data within the Virtual Data Room viewer window to read. Right2Dat's VDR allows granular access to a view-only setting so that designated users can inspect documents without printing and downloading them, keeping the documents very safe within the Virtual Data Room.

  • Documents open in a secure, Sandbox Viewer, which is often powered by HTML5, preventing users from copying content to the clipboard or taking screenshots using the advanced screen-capture deterrents.
  • Even in View-only mode, each page carries a dynamic watermarking to discourage illicit photography.
  • The administrators can assign a view-only status at the file, folder, or user group level, ensuring compliance with "Need to Know" principles.
View-Print-Download - Right2Data

View-Print-Download

Fine-Grained Permissions For Maximum Security

Beyond View-only, the Right2Data provides a well-defined permission setting for View-Print-Download options that are widely used by enterprises. Our Platform offers well-designed and managed View-Print-Download options that can be granted to users on the basis of their hierarchical document access rights.

  • The admins can assign only the View option, disabling the print and download options to the users, keeping the data safer.
  • The print restriction option blocks the user from directly printing the document or prevents the user from saving the document as a PDF from a secure view.
  • It also allows the admins to provide role-based access.
  • Administrators can set document expiration dates; once expired, the data room documents cannot be viewed even by previously authorized users.
  • The admin/authorized person can download the entire data room once all signed documents have been uploaded to seal a deal or completion of due diligence.