Security Center
The Security Center describes the security model applied to Firmato European e-sign V3. It complements, and does not replace, contractual obligations, the DPA and provider-specific safeguards.
1. Security governance
UESE ITALIA S.p.A. applies a risk-based security model built on segregation of duties and least privilege. Sensitive activities are logged and, where configured, subject to stronger authentication.
2. Identity and access
Passwords are stored only in derived form using robust hashing. Firmato supports TOTP two-factor authentication, session controls, revocation, RBAC and scoped API credentials.
3. Data, secrets and documents
Application secrets and provider credentials are encrypted locally with AES-256-GCM where provided by the architecture. Files are subject to type, size and authorization checks; documents and evidence may be associated with SHA-256 hashes.
4. Application and API security
Firmato uses parameterized queries, output escaping, CSRF controls, secure cookies, server-side authorization, webhook validation and rate controls where configured.
5. Logging and incident response
Authentication, administration, billing, KYC, signature, wallet and evidence operations generate audit events. Security incidents are assessed, contained, documented and notified where required under GDPR, applicable NIS2 rules and contract.
6. Shared responsibility
Trust services, KYC, payments, timestamps and other functions may rely on third parties. UESE secures the components under its control; customers remain responsible for their devices, users, API keys, networks, configurations and uploaded data.
7. Security reporting
Suspected vulnerabilities should be reported through the platform support channels, avoiding premature public disclosure and providing only the technical information needed for investigation.
8. Versioning, precedence and evidence retention
Firmato records the version made available and, where the application flow provides for acceptance, the corresponding acceptance evidence including date, account and technical audit information. Material changes may require renewed acknowledgement or acceptance. Language and country are separate variables: language determines the linguistic version, while country determines the applicable national supplement.