Grey Line

Click Here To Pay

security policy

Royal Bank of Canada and our service provider, Teranet are committed to providing a secure environment that protects your personal information. [Please refer to our Privacy Policy for information on what personal information we may gather and how we use it.

All sessions on the™ portal are secured using Secure Socket Layer (SSL) encryption. This means that all information you exchange with the servers is encrypted when it travels between your desktop and our server. Only the server or your desktop can decrypt the information. In addition, transmissions are encrypted on the database, with the key itself also being encrypted.

All servers for the site are protected by sophisticated firewall hardware and software. Firewall logs are monitored to ensure no one has attempted to compromise firewall security

The servers are physically located in a facility requiring security card access. All access is restricted to authorize site operations personnel only. The facility is generally staffed 24 hours a day/7 days a week.

Access to the site is protected by a user-id and password combination that is unique to each user. All user-ids and passwords are encrypted and stored in a secure database on Teranet Server. Logins are monitored for unsuccessful attempts and the user account is locked if a maximum number of attempts have been reached.

Our service provider Teranet is dedicated and committed to constantly improving its information security program. To that end Teranet has earned the TruSecure Certification from TruSecure Corporation, formerly (TruSecure Corporation is recognized as a worldwide authority in independent security assurance services.) To earn this certification Teranet was subjected to a number of tests and assessments to determine the degree of risk prevalent in operation, as defined by TruSecure Corporation:

  1. Privacy, as it applies to employee data, customer information and proprietary information.
  2. Electronic threats, in the forms of network “sniffing”, “spoofing”, and “hacking”.
  3. Privacy, as it applies to employee data, customer information and proprietary information.
  4. Downtime, as a result of electronic threats, such as Denial of Service attacks (DOS), errors in code and logic bombs, or as a result of broader issues, such as natural disasters.
  5. Malicious code such as viruses, worms and Trojan horses.
  6. Physical security, including theft, unsecured workstations and proper facilities.
  7. Human factors, including policies and procedures.

Teranet successfully passed all tests and was certified. It is retested on a quarterly basis to maintain its certification.