FAQ 950: Gemini Web Security

Problem: What is the level of security in terms of data encryption between participants/sponsors, Gemini and the clients app server?

Solution: The Gemini site uses https. Therefore, any data transmitted between the participant and/or sponsor and the Gemini site is encrypted. Secondly, clients have the option of getting an https certificate which would encrypt all data transmitted between the Gemini server and the client server (this is mostly account data). Regarding penetration tests, our production server was SAS70 approved and this review includes a level of security measures. Lastly, our ISP, Rackspace, routinely runs a security test on our servers and has not found any risk areas.