Resultados de la búsqueda
49 results found with an empty search
- Staff007 | anteia sas
Ernest Viana product manager phone +57 301 596 6685 Email ernesto@anteia.co
- Staff009 | anteia sas
Ernest Viana product manager phone +57 301 596 6685 Email ernesto@anteia.co
- ANS | anteia
Core ID ANS 1. SOPORTE Y MANTENIMIENTO Requerimientos Particulares (de personalización o adaptación): En caso de que el Cliente requiera una serie de adiciones o adaptaciones particulares al Sistema anteia , los cuales por definición necesitarán labores de programación a cargo del equipo de desarrolladores de anteia . Si los requerimientos son genéricos, es decir, aplican para la base instalada de clientes de anteia , estos son evaluados e incluidos en el “roadmap” de versiones de anteia y luego estarán disponibles sin costo (cuando la versión correspondiente sea liberada). En caso de que los requerimientos sean particulares y exclusivos para el Cliente o bien que no se pueda esperar a la próxima versión para contar con ellos, el Cliente debe hacer un levantamiento del o los requerimientos según los formatos indicados por anteia. Con esta especificación escrita anteia cotiza el requerimiento. Después de que dicha cotización es aceptada por escrito por el Cliente, se inicia su desarrollo, atendiendo a las prioridades del equipo de desarrollo de anteia . Todas las tareas de programación del Sistema se realizan en Colombia, en donde se encuentra el equipo de desarrolladores. El costo de la instalación posterior al desarrollo de estos requerimientos particulares se incluirá en la cotización respectiva y en caso de estar de acuerdo y exista contrato vigente, se modificará el anexo correspondiente. Definiciones: Mantenimiento: son aquellas actualizaciones, mejoras y nuevas versiones de la plataforma, las cuales podrán ser realizadas por anteia de manera libre en cualquier momento, siempre y cuando no afecte el servicio. En caso de que se requiera algún cambio por parte del cliente a nivel de integración, se le notificará previamente para realizar el plan de migración. Las adecuaciones se realizarán en horarios no hábiles. Soporte: es el apoyo operativo que ofrece anteia a sus clientes, en relación con la plataforma, con el fin que estos puedan acudir a anteia . Nivel: soporte técnico que se prestará al cliente. Se clasifica en Primer y Segundo Nivel. Soporte Técnico: Etapa inicial en la cual el personal de técnico del Cliente analiza el problema y determinan si la solución puede producirse sin necesidad de recurrir a anteia . En muchas ocasiones los inconvenientes son resueltos a este nivel y los tiempos de respuesta a los mismos dependen del mismo Cliente. Para reducir las emergencias, todo trabajo de nuevas instalaciones, mantenimiento de bases de datos, y cualquier otro ajuste que ponga en peligro la estabilidad de los servicios prestados por anteia y que sea el Cliente el que los vaya a realizar por sus propios medios, debe ser sometido a validación por parte del personal de soporte de anteia y en caso de requerir soporte sobre estas acciones, la empresa cobrará dicho servicio adicional, conforme lo establecido en cobro horas hombres en el Contrato. De igual manera, el Cliente puede optar por contactar por correo electrónico al equipo de soporte de anteia en Bogotá D.C./ San José CR para aclarar dudas; en el correo: support@anteia.co En caso que el problema persista, entonces el cliente puede recurrir al esquema de soporte de anteia. Los niveles de atención que anteia ofrece son los siguientes: Soporte Primer Nivel. Una vez concluido que el nivel de soporte interno y las personas de la organización no pueden resolver el asunto, los clientes pueden comunicarse con el equipo de soporte de anteia enviando un correo electrónico a support@anteia.co . En el mismo, los clientes deben proporcionar una explicación detallada del inconveniente que están experimentando. Soporte Segundo Nivel. Cuando el problema no pueda resolverse en el primer nivel, anteia procederá a remitir correo electrónico al cliente informando que el caso pasa a segundo nivel, en caso de ser necesario se tendrá llamada o videollamada. Horario del soporte El soporte se otorga los días hábiles en horario de 8 a.m. a 6 p.m. hora colombiana. Procedimiento Para la atención de fallas reportados por los clientes anteia , será: El cliente debe remitir correo electrónico support@anteia.co detallando la falla y anexando pantallas, reportes, mensajes, etc. que ayuden a los ingenieros de anteia a determinar las causas del problema. anteia contesta el correo electrónico indicando el número del ticket asignado e inicia el proceso de revisión. anteia evalúa la consulta o problema del cliente para determinar qué acción se debe tomar. Categorización y Priorización: La solicitud se clasifica según su tipo (consulta, queja, solicitud de servicio, etc.) y urgencia. anteia utiliza guías de ayuda, bases de conocimientos o scripts predefinidos para proporcionar una solución al problema del cliente. Si el problema es básico y puede ser resuelto en el Primer Nivel, el anteia lo hará en los tiempos de respuestas definidos. Si no, el ticket se escalará al Segundo Nivel de Soporte con toda la información relevante recopilada. anteia le notificará al cliente por correo electrónico que el caso ha sido escalado a Soporte Segundo Nivel. El equipo de Soporte de Segundo Nivel trabaja en el problema hasta que se encuentra una solución. anteia , una vez resuelto el problema, procederá a notificarlo al cliente con los detalles de la solución. El equipo de soporte de anteia revisa regularmente los incidentes y las respuestas de los clientes para identificar áreas de mejora. Tiempos de Respuesta Los tiempos de respuesta que dará anteia a los clientes conforme los siguientes Niveles: Soporte Primer Nivel: en un máximo de 6 horas, contados a partir de la respuesta por parte de anteia indicando el número del ticket de servicio. Soporte Segundo Nivel: en un máximo de 2 horas, contados a partir de la llamada generada por anteia cuando no ha sido posible resolverlo en el primer nivel. 2. COMPENSACIONES POR INACTIVIDAD Definiciones: Error: petición válida que resulta en un comportamiento no deseado del sistema, por cuenta y responsabilidad de anteia y está clasificado por el listado HTTP en 500, o de la familia 500. Tasa de Error: es el número de Peticiones Válidas que resultan en un error HTTP 500 (o de la familia 5**), dividido por el total de Peticiones Válidas durante ese periodo. Peticiones Válidas: es un llamado a un API o una interfaz que son conformes a las especificaciones determinadas con anteia en el siguiente link , y que finaliza con una respuesta esperada. Ventana de Mantenimiento: significa una ventana de tiempo durante la cual el servicio se desconecta para tareas de actualización o mantenimiento. Periodo de Inactividad: es el espacio de tiempo de cinco (5) o más minutos consecutivos, en el cual un sistema, servicio o plataforma no recibe respuesta ni responde a ninguna interacción o solicitud por parte de los usuarios o clientes. Las Ventanas de Mantenimiento no están incluidas en el Periodo de Inactividad. Tiempo de Funcionamiento Mensual: es el total de minutos del mes, menos los Periodos de Inactividad del mes. Porcentaje de Tiempo en Funcionamiento Mensual: Es el Tiempo de Funcionamiento Mensual dividido por el total de minutos en el mes. Servicio Cubierto: significa los servicios de fastSignature, CoreID, Magic Forms, BackOffice y HyperFlow, dependiente del Contrato Suscrito entre las partes. Impacto: Es una medida relacionada con el Periodo de Inactividad que se medirá entre alto, medio y bajo. Detalle Durante el plazo del Contrato con el Cliente, anteia se ha comprometido a proporcionar los servicios definidos en este y, por tanto, se obliga a proporcionar un Porcentaje de Tiempo en Funcionamiento Mensual de la siguiente manera (en adelante el "Objetivo de Nivel de Servicio" ): Servicios de anteia : Porcentaje de Tiempo en Funcionamiento Mensual fastSignature Core ID Magic Forms BackOffcie Hyperflow 99.9 % 99.9 % 99.9 % 99.9 % 99.9 % Si anteia no cumple con el Objetivo de Nivel de Servicio, el Cliente podrá requerir a anteia que aplique los descuentos a la factura del siguiente mes, conforme el siguiente cuadro aplicable: Porcentaje de Tiempo en Funcionamiento Mensual Porcentaje de descuento aplicable en la factura siguiente: 99% a < 99.9% [Impacto Bajo] 95% a < 99% [Impacto Medio] < 95% [Impacto Alto] 10 % 25 % 50 % Procedimiento para solicitar Compensación por Inactividad Para ser aplicado el descuento en la factura siguiente, es necesario cumplir con el siguiente procedimiento: Notificar al equipo de asistencia técnica de anteia por correo electrónico hello@anteia.co sobre los hechos que configuren los Errores y por tanto la Inactividad, así como, los soportes correspondientes con fecha y hora que se produjo, en un plazo máximo de treinta días desde que lo evidenció. anteia tendrá un plazo máximo de cinco (5) días para dar respuesta al Cliente sobre la petición realizada. En caso que anteia evidencie y sea aplicable la petición del Cliente, procederá a dar el Porcentaje de descuento en la factura siguiente. En caso que anteia evidencia que no es aplicable la petición del Cliente dará respuesta con los sustentos correspondientes. La Cantidad máxima del Porcentaje de descuento aplicable por mes es del 50%. El presente documento es la versión actualizada de los ANS, reemplazando cualquier versión anterior. Fecha de actualización: 21 de Octubre 2023
- Política de privacidad | anteia
Core ID Nuestro objetivo es informarte de la manera más sencilla sobre nuestra Política de Tratamiento de Datos. Si tienes cualquier duda, nuestros canales de comunicación están disponibles en todo momento. 1. ¿Quiénes somos? anteia, es una empresa especializada que, por medio de su plataforma, brinda a los usuarios un sistema de verificación de identidad de la persona mediante herramientas digitales que se encargan de identificar y verificar la autenticidad del Usuario Final con base en su huella (biometría, voz, cara), para la celebración de contratos inteligente por medio de firma electrónicas. Esta política describe nuestras prácticas de privacidad, se establecen las finalidades, alcance, medidas y procedimientos de los sistemas que tengan relación directa con los datos personales que anteia llegue a conocer del Usuario Final, con el fin de realizar el objeto y el tratamiento de datos que ha contratado el Cliente, así como los mecanismos con que los titulares cuentan para conocer, actualizar, rectificar o suprimir los datos suministrados, o revocar la autorización que se otorga con la aceptación de la presente Política. anteia adopta y hace público a todos los interesados la presente política, la cual contiene los lineamientos y elementos esenciales para el cumplimiento de las leyes territoriales sobre protección de datos de donde se suscriba la autorización a dicho tratamiento. 2.Definiciones Para efectos e interpretación de esta Política, de las obligaciones de anteia así como de las obligaciones y derechos de los Titulares, los términos que se señalan a continuación tendrán los siguientes significados: Autorización: Consentimiento previo, expreso e informado del Titular para el Tratamiento de los datos personales, de acuerdo con las finalidades y en los términos de esta Política de Privacidad y de Protección de Datos Personales. Aviso de privacidad: Comunicación verbal o escrita a través de la cual el Responsable del tratamiento de datos informa al Titular acerca de la existencia de la Política de Privacidad que le aplica, la forma de acceder a la misma y las finalidades del Tratamiento que se pretende dar a los datos personales. El aviso de privacidad es utilizado únicamente en caso de no ser posible poner a tu disposición la Política de Privacidad. Base de Datos: Conjunto organizado de datos personales que es objeto de Tratamiento. Canales para ejercer derechos: Medios de recepción y atención de peticiones, consultas y reclamos que el Responsable y/o el Encargado del Tratamiento ponen a disposición de los Titulares de los datos para que este ejerza sus derechos. Dato biométrico: Son los rasgos biológicos o físicos que permiten identificar a una persona como única frente al resto de la población; son datos biométricos entre otros, la huella dactilar, los rasgos faciales, el patrón del iris del ojo, el tono o timbre de voz. Dato personal: Son aquellos que permiten identificar a una persona, por ejemplo, el nombre, teléfono, cédula, etc. Dato semiprivado: Dato que no tiene naturaleza íntima, reservada, ni pública y cuyo conocimiento o divulgación puede interesar a su titular y a cierto sector o grupo de personas o a la sociedad en general. Dato público: Son aquellos datos que no estén clasificados en las otras categorías, por lo que se considera residual, es decir que no sean semiprivados, privados o sensibles. Estos conciernen a un interés general, tales como los documentos públicos, sentencia judicial, los relativos al estado civil de las personas, entre otros. Dato sensible: Son aquellos datos sólo relevantes para su Titular, de naturaleza reservada y por lo cual, primordialmente protegidos de un potencial trato marginal o discriminatorio, y que perturben la dignidad del afectado o titular. Información pública: Es toda información que un sujeto obligado genere, obtenga, adquiera, o controle en su calidad de tal. Información pública clasificada: Es aquella información que estando en poder o custodia de un sujeto obligado en su calidad de tal, pertenece al ámbito propio, particular y privado o semiprivado de una persona natural o jurídica por lo que su acceso podrá ser negado o exceptuado, siempre que se trate de las circunstancias legítimas y necesarias y los derechos particulares o privados. Responsable del Tratamiento: Persona natural o jurídica, pública o privada, que por sí misma o en asocio con otros, decide sobre la base de datos y/o el Tratamiento de los datos. Encargado del Tratamiento: Persona natural o jurídica, pública o privada, que por sí misma o en asocio con otros, realiza el Tratamiento de datos personales por cuenta del Responsable del Tratamiento y siguiendo sus instrucciones. Titular: Persona natural cuyos datos personales son objeto de Tratamiento. Tratamiento: Cualquier operación o conjunto de operaciones sobre datos personales, tales como la recolección, almacenamiento, uso, circulación o supresión. Cliente: Persona natural o jurídica, pública o privada, que tiene su propia política de Privacidad y acude a los servicios de anteia para poder verificar sus propios clientes, quien será el responsable del tratamiento del dato, del almacenamiento y la seguridad del mismo y que denominaran la presente política y condiciones de anteia como el usuario final. Usuario final: Aquella persona que por disposición del Cliente utiliza los servicios contratados por este con anteia. Operador: Se denomina operador de información a la persona, entidad u organización que recibe de la fuente datos personales sobre varios titulares de la información, los administra y los pone en conocimiento de los usuarios bajo los parámetros de la ley. Fuente de datos: La fuente de información es la persona, entidad u organización que recibe o conoce datos personales de los titulares de la información, en virtud de una relación comercial o de servicio o de cualquier otra índole y que, en razón de autorización legal o del titular, suministra esos datos a un operador de información, el que a su vez los entregará al usuario final. Transferencia: La transferencia de datos tiene lugar, cuando el Responsable y/o Encargado del Tratamiento de datos personales envía la información o los datos personales a un receptor, que a su vez es Responsable del Tratamiento y se encuentra en el mismo país o en otra ubicación geográfica. Transmisión: Tratamiento de datos personales que implica la comunicación de los mismos dentro o fuera de un territorio, con el fin de que el Encargado realice el Tratamiento por cuenta del Responsable. anteia ASISTENTE INTELIGENTE: - Sistema Inteligente que a través del video (computación cognitiva) logra que el proceso de compras, contratación y vinculación sea más confiable, sencillo y seguro. 3. Principios de Tratamiento de los Datos Personales Durante el tratamiento de sus datos personales anteia observará en todo momento lo siguientes principios: Principio de acceso y circulación restringida: El Tratamiento se sujeta a los límites que se derivan de la naturaleza de los datos personales y las autorizaciones dadas por el titular, así como a las disposiciones de la presente Política, de la Ley Territorial donde se realice el tratamiento de los datos. El Tratamiento sólo podrá hacerse por personas autorizadas por el Titular y/o por las personas previstas por ley. Principio de confidencialidad: Todas las personas que intervengan en el Tratamiento de datos personales, cuando estos datos no tengan la naturaleza de públicos, están obligadas a garantizar la reserva de la información, inclusive después de finalizada su relación con alguna de las labores que comprende el Tratamiento, pudiendo sólo suministrar o comunicar los datos personales cuando ello corresponda al desarrollo de las actividades autorizadas en la Ley Territorial donde se realice el tratamiento de los datos. Principio de Finalidad: el Tratamiento obedecerá a una finalidad legítima, y la finalidad declarada, determinada y explícita que hizo el titular del dato en la autorización expresa para su tratamiento. Principio de Libertad: el Tratamiento sólo podrá ejercerse con el consentimiento, previo, expreso e informado del Titular. Los Datos Personales no serán obtenidos o divulgados sin previa autorización, o en ausencia de mandato legal o judicial que releve el consentimiento del Titular. Principio de proporcionalidad: anteia se compromete a tratar únicamente los datos personales que resulten adecuados, pertinentes y limitados al mínimo necesario con relación a las finalidades que justifican su tratamiento de acuerdo con la autorización debidamente otorgada. Principio de seguridad: anteia como Responsable y/o encargada del Tratamiento de datos de carácter personal y sensible, proporcionará las medidas técnicas, humanas y administrativas necesarias para dar seguridad a los registros de datos personales, evitando su adulteración, pérdida, consulta, uso o acceso no autorizado o fraudulento. Principio de Veracidad o Calidad: La información sujeta a Tratamiento será veraz, completa, exacta, actualizada, comprobable y comprensible, el titular podrá conocer, actualizar y rectificar la información recogida en bases de datos y los demás derechos, libertades y garantías a que se refieren las leyes territoriales sobre protección de datos de donde se suscriba la autorización a dicho tratamiento. Principio de máxima publicidad para titular universal: Toda información en posesión, bajo control o custodia de un sujeto obligado es pública y no podrá ser reservada o limitada sino por disposición legal. 4. Datos sensibles anteia reconoce el carácter facultativo de la respuesta a las preguntas que versen sobre datos sensibles, por lo cual, en los casos en que trate los datos de manera temporal, está comprometido en proteger sus datos personales, sensibles, su privacidad y su seguridad. Para lo anterior, contamos con un equipo técnico de privacidad, altamente cualificado, que se compromete a proteger todos los datos personales y sensibles recopilados en cada uno de los servicios que prestamos y garantizar que los mismos sean manejados conforme las leyes territoriales de donde se realice el tratamiento de los datos, y la presente política, garantizando especialmente el derecho a la protección de los datos personales. 5. Datos Biométricos anteia podrá recolectar información personal biométrica (como huellas, fotografías del rostro selfie, iris, cadencias, voz, firma, reconocimiento facial, rasgos morfológicos entre otros), en adelante “Datos Biométricos” con el fin de permitir la identificación de los Usuarios y/o Titulares, conforme a los parámetros de seguridad establecidos en la regulación donde se tratan los datos, las buenas prácticas y las señaladas por las autoridades. 6. Derechos de los Titulares a. Conocer, actualizar y rectificar sus datos personales frente a los Responsables del Tratamiento o Encargados del Tratamiento. Este derecho se podrá ejercer, entre otros frente a datos parciales, inexactos, incompletos, fraccionados, que induzcan a error, o aquellos cuyo Tratamiento esté expresamente prohibido o no haya sido autorizado; b. Solicitar prueba de la autorización otorgada al Responsable del Tratamiento salvo cuando expresamente se exceptúe como requisito para el Tratamiento. c. Presentar quejas ante la respectiva autoridad competente por infracciones a las leyes que regulen la protección y tratamiento de datos y las demás normas que la modifiquen, adicionen o complementen; d. Revocar la autorización y/o solicitar la supresión del dato cuando en el Tratamiento no se respeten los principios, derechos y garantías constitucionales o legales o bien a voluntad del titular del dato que no desee que su dato continúe siendo tratado por la compañía, salvo que su dato deba seguir siendo tratado en virtud de la Ley u orden judicial, caso en el cual se le informará respectivamente al titular. La revocatoria y/o supresión procederá cuando la autoridad competente respectiva haya determinado que en el Tratamiento el Responsable o Encargado han incurrido en conductas contrarias a la Ley de protección de datos del territorio donde se realice el tratamiento. e. Acceder en forma gratuita a sus datos personales que hayan sido objeto de Tratamiento; 7. Obligaciones de anteia a. Informar al Cliente que por tratarse de datos sensibles debe notificarle al usuario final que este último no está obligado a autorizar su Tratamiento, llegado el caso, que el usuario final no otorgue la autorización del tratamiento de sus datos, anteia no podrá realizar la autenticación de la identidad del mismo. b. En el caso de que el Cliente actúe como responsable del tratamiento, anteia solicitará al Cliente que informe al titular de forma explícita y previa, que de forma directa o por intermedio de terceros se tratarán datos de forma permanente o temporal y por lo cual, si el Usuario Final está de acuerdo, dará su consentimiento expreso. De igual manera, anteia podrá solicitárselo al Usuario Final, con instrucción expresa del Cliente. c. En el caso de que el Cliente actúe como responsable del tratamiento, anteia velar por tratar de manera temporal y como encargado los datos conforme los estándares regulatorios más altos a nivel mundial. d. En el caso de que anteia actúe como responsable del tratamiento, solicitará directamente al Usuario Final la autorización del tratamiento de los datos y velará por tratar los mismos conforme los estándares regulatorios más altos a nivel mundial. 8. Finalidades del Tratamiento de la Información Personal e Información Personal Sensible El Tratamiento de datos personales que anteia realiza obedece a una finalidad legítima y a su objeto social, finalidad determinada, explícita y legítima que será autorizada de forma expresa por el titular del dato, para lo cual, anteia cuenta con tres (3) sistemas de los cuales, cada uno cuenta con la autorización y se expresa de forma clara la finalidad de dicho tratamiento. En el caso en que anteia actúe como encargado temporal de los datos: La información del titular del dato recolectado y tratado de manera temporal por anteia, se circunscribirá al desarrollo del objeto social de anteia y al servicio usado por el Usuario Final y conforme le informe el Cliente. Lo anterior, conforme la finalidad contenida en la autorización suscrita por el titular. En el caso en que anteia actúe como encargado de los datos: La información del titular del dato recolectado y tratado de manera temporal por anteia, se circunscribirá al desarrollo del objeto social de anteia y al servicio usado por el Usuario Final, de acuerdo con lo que le informe el Cliente, conforme la finalidad contenida en la autorización suscrita por el titular. En el caso en que anteia actúe como responsable de los datos: La información del titular del dato recolectado y tratado por anteia se circunscribirá al desarrollo del objeto social de anteia y al servicio usado por el Usuario Final, conforme la finalidad contenida en la autorización suscrita por el titular. Los datos sensibles, semiprivados y privados que sean recopilados durante el uso de las plataformas de anteia y/o terceros, podrán ser usados con fines estadísticos, científicos, para generar análisis, proyecciones, mejorar la experiencia del usuario u otra información de valor; sin embargo, estos serán tratados como datos desligados del titular del dato y no se entenderá como que anteia conserva la base de datos del cliente, ya que ha procedió a anonimizarlo en su calidad de encargado. 9. Finalidades especiales de la Información Personal e Información Personal El Tratamiento de datos personales que anteia realiza obedece a una finalidad legítima y a su objeto social, por tanto, a los datos personales y sensibles suministrados a anteia tendrán las siguientes finalidades especiales: Para la correcta ejecución del contrato suscrito entre el Cliente y/o Titular y anteia. Creación de la cuenta para el acceso a los servicios prestados por anteia. Completar la información del perfil para acceder a la plataforma o back Office de anteia. Verificación de identidad del Titular, con el uso del documento de identidad vigente que sirva para acreditar la identidad del mismo. Creación de la identidad digital del Titular. Obtener información del Titular de otras fuentes para compararla con la que anteia recopila. Verificación de los datos contenidos en el documento de identidad y de la biometría facial del Titular ante la entidad competente, con la finalidad de corroborar que el documento de identidad presentado para los trámites y/o servicios sea autentico y corresponda con el registrado en la base de datos de la entidad competente. Revisión del historial de antecedentes policiales, penales y judiciales del Titular. Consulta de listas restrictivas internacionales y nacionales para prevenir y administrar riesgos de lavados de activos, financiación del terrorismo, LAFT en el marco del cumplimiento del SIPLAFT, SARLAFT, SARO y SAGRILAFT, para detección y prevención de fraude y cuestiones de seguridad. Recopilación y almacenamiento de resultados de la consulta de antecedentes penales, judiciales o advertencias sobre fraude para la verificación de la identidad a efectos del compromiso de anteia con la prevención de prácticas fraudulentas y evaluación de riesgos. Recepción de información acerca del Titular, de sus actividades dentro y fuera de la Plataforma de anteia a través de aliados de este o información acerca de las experiencias y las interacciones que el Titular haya tenido a través de anunciantes aliados. Facturación y demás efectos tributarios, en cuyo caso será compartida con la autoridad competente de cada país, encargadas de desarrollar dicha labor. Procesamiento de pago sobre los servicios adquiridos por el Titular. Recopilación de los servicios que utilizan los Titulares y la forma en que la que hacen uso de estos. Mejora de las iniciativas comerciales y promocionales de anteia, así como el análisis de las paginas visitadas y las búsquedas realizadas por los Titulares, para mejora de la oferta de contenidos y artículos, personalización de estos contenidos, su presentación y servicios de anteia. Envío de información por medio mensajes de texto y/o correos electrónicos suministrados por el Titular, sobre los servicios, modificaciones de estos o de sus tarifas, recordatorios de pago, promociones, eventos e información de interés para los Titulares en general. Análisis de la información personal por parte de anteia, sus accionistas, vinculadas y/ relacionadas, y terceros contratados para el desarrollo y promoción de la venta de los servicios prestados por anteia. Consultar el comportamiento crediticio, financiero y comercial del Titular a las centrales de información financiera y/o a quien represente sus derechos y a cualquier otra base de datos o cualquier otra entidad autorizada, la información personal, sensible, confidencial que resulte de todas las operaciones directa o indirectamente del contrato, así como, el incumplimiento de obligaciones. 10. Tratamiento de Datos Personales Tratamiento de datos. anteia tratará los datos públicos de los titulares de conformidad con la finalidad para la cual es capturada dicha información, tomando las medidas necesarias que garanticen el cumplimiento de los principios y obligaciones legales respectivas. Tratamiento de datos sensibles. anteia solo tratará datos personales sensibles en aquellos casos que sea estrictamente necesario, para lo cual solicitará la autorización previa y expresa al titular del dato e informándoles sobre la finalidad específica del Tratamiento. Parágrafo: anteia solo almacenará los datos personales del Usuario Final cuando este quede expreso en la autorización del tratamiento de datos. 11. Clasificación de las Bases de Datos anteia ha clasificado sus Bases de Datos de la siguiente manera: Bases de datos de Clientes. Corresponde a las bases de datos manuales y/o automatizadas, que contienen datos de naturaleza pública y privada de personas jurídicas o naturales, con las cuales se mantiene un vínculo contractual y/o comercial en el desarrollo propio del objeto social de anteia. Esta base de datos podrá contener datos personales autorizadas por el titular y los cuales tienen como finalidad el cumplimiento, la ejecución y el desarrollo de las relaciones contractuales y el envío de material publicitario, información de eventos o servicios que ofrece la compañía. El Tratamiento de estos datos para fines diferentes al desarrollo y ejecución de la relación contractual o el cumplimiento de deberes de carácter legal, requerirá de autorización previa del titular. Bases de datos de Proveedores. Son las bases de datos manuales y/o automatizadas que contienen datos personales de titulares con quienes existe un vínculo contractual y/o comercial entre anteia y el titular del dato y cuyo Tratamiento tiene como finalidad cumplir con las obligaciones contractuales y legales. Bases de datos Laborales. Son las bases de datos manuales y/o automatizadas que contienen datos de titulares que se presentan como candidatos, o se vinculan laboralmente con anteia, o son extrabajadores de anteia, y cuyo Tratamiento tiene como finalidad la identificación del titular para cumplir con las disposiciones legales y reglamentarias. Esta base de datos incorpora información privada, pública, datos sensibles y de menores. El Tratamiento de los datos personales para los fines diferentes al cumplimiento de las obligaciones derivadas de la relación laboral requerirá autorización previa del titular o su Representante Legal, según sea el caso. En ningún caso, anteia dará Tratamiento a los datos sensibles o de menores sin autorización previa. anteia, realizará el Tratamiento de los Datos Personales de los Candidatos para efectos de determinar si estos califican al perfil de un cargo a ser ocupado, previa realización de un proceso de selección, para verificar la calidad de la información suministrada por el candidato y la autenticidad de la misma y para almacenar los datos con la finalidad de ser usados en futuros procesos de selección. 12. ¿Qué información solicita anteia? anteia para el cumplimiento de su objeto y conforme lo expuesto en la presente política solicita la siguiente información: Nombre del titular completo. Número de Identificación de identificación (cédula de ciudadanía, cédula de extranjería o cualquier otro ID) Datos biométricos e imagen personal. Dirección física. Correo electrónico. Celular. Consulta de Antecedentes (judiciales, penales, policivos, fiscales, procuraduría, contraloría y listas restrictivas) Consulta de procesos judiciales y penales. anteia se reserva el derecho a solicitar datos distintos a los mencionados y en dicho caso, informará de forma clara al Cliente y/o Usuario Final la finalidad del tratamiento de datos solicitados. 13. Seguridad e integridad de la información Durante el tiempo que anteia requiere la información personal y sensible de los Usuario Finales y conforme lo establece en su manual de gestión de la política de privacidad y de seguridad de la información, provee todos los mecanismos de seguridad al momento de tratar datos. anteia emplea herramientas como cortafuegos y cifrado de datos. Así mismo, en los casos que anteia en los casos que corresponda almacene los datos personales y sensibles, conforme lo establece en su manual de gestión de la política de privacidad, y de seguridad de la información. También exigimos se utilicen los diferentes mecanismos de autenticación de la identidad cada vez que acceda a su cuenta en línea. 14. anteia como responsable del Tratamiento de los Datos Personales y sensibles anteia está comprometida a cumplir con los deberes impuestos por la ley, por lo cual, debe obrar de tal forma que cumpla con las siguientes obligaciones: Garantizar al Usuario Final, en todo tiempo, el pleno y efectivo ejercicio del derecho de conocer, actualizar o rectificar sus Datos Personales. Solicitar y conservar, en condiciones previstas en esta Política, copia de la respectiva autorización otorgada por el Usuario Final. Informar de manera clara y suficiente al Usuario Final sobre la fidelidad de la recolección y los derechos que le asisten por virtud de la autorización otorgada. Informar a solicitud del Usuario Final sobre el uso dado a sus Datos personales. Tramitar las consultas y reclamos formulados en los términos señalados en la presente Política. 15. anteia como encargado del Tratamiento de los Datos Personales y sensibles anteia realiza el Tratamiento de Datos en nombre de otra entidad u organización (Responsable del Tratamiento) como encargado o mandatario o figura equivalente, por lo cual deberá cumplir los siguiente deberes: Garantizar al Titular, en todo tiempo, el pleno y efectivo ejercicio del derecho de hábeas data. Conservar la información bajo las condiciones de seguridad necesarias para impedir su adulteración, pérdida, consulta, uso o acceso no autorizado o fraudulento. Realizar oportunamente la actualización, rectificación o supresión de los datos. Actualizar la información reportada por los Responsables del Tratamiento dentro de los cinco (5) días hábiles siguientes contados a partir de su recibo; conforme a las leyes territoriales donde se realice el tratamiento de los datos. Abstenerse de circular información que esté siendo controvertida por el Titular y cuyo Bloqueo haya sido ordenado por las autoridades judiciales o entidades de control. Permitir acceso a la información únicamente a las personas autorizadas por el Titular o facultadas por la ley territorial de donde se realice el tratamiento de los datos para dicho efecto. Informar a las entidades de control y/o autoridades judiciales cuando se presenten violaciones a los Códigos de seguridad y existan riesgos en la administración de la información de los Titulares. En dicho caso, anteia tratará los datos del Usuario Final conforme a los estándares regulatorios más altos a nivel mundial y proveerá todos los mecanismos de seguridad para el almacenamiento de los datos. 16. anteia como encargado temporal del Tratamiento de los Datos Personales y sensibles anteia realiza el Tratamiento de Datos en nombre de otra entidad u organización (Responsable del Tratamiento) como encargado o mandatario temporal o figura equivalente, por lo cual no almacenará el dato y deberá cumplir los siguiente deberes: Garantizar al Titular, en todo tiempo, el pleno y efectivo ejercicio del derecho de hábeas data. Conservar la información bajo los parámetros de la anonimización. Actualizar la información reportada por los Responsables del Tratamiento dentro de los cinco (5) días hábiles siguientes contados a partir de su recibo; conforme a las leyes territoriales donde se realice el tratamiento de los datos. Abstenerse de circular información que esté siendo controvertida por el Titular y cuyo Bloqueo haya sido ordenado por las autoridades judiciales o entidades de control. Permitir acceso a la información únicamente a las personas autorizadas por el Titular o facultadas por la ley territorial de donde se realice el tratamiento de los datos para dicho efecto. Informar a las entidades de control y/o autoridades judiciales cuando se presenten violaciones a los Códigos de seguridad y existan riesgos en la administración de la información de los Titulares. En dicho caso, anteia tratará temporalmente los datos del Usuario Final hasta tantos se anonimice el dato recolectado y la base sea entregada al Cliente, conforme a los estándares regulatorios más altos a nivel mundial. 17. Cookies Las cookies son archivos de datos (no códigos) creados y enviados por un sitio web y almacenados en el navegador del usuario. De esta forma, el sitio web puede consultar la actividad previa del navegador. Una cookie no puede borrar ni leer información del ordenador del titular de los datos, ni tampoco identificar a una persona, sino que reconoce una combinación de computación-navegador-usuario. Las cookies tienen distintas funciones de acuerdo con la finalidad para la cual se usan, existen las cookies publicitarias, de funcionalidad o personalización, aquellas estrictamente técnicas, cookies de análisis y de publicidad comportamental. Las cookies son parte fundamental del funcionamiento del Sistema Inteligente, el objetivo principal de estas es mejorar la experiencia del usuario, para que esta se más cómoda y eficiente, sin embargo, anteia no utilizar cookies con fines comerciales, no para realizar publicidad ni para transferir cookies a terceros. 18. Autorización para Tratamientos de datos anteia solicitará, previamente al Tratamiento de los datos, al titular del dato la autorización para el Tratamiento de datos personales por cualquier medio, físico o electrónico, que permita ser utilizado como prueba de la autorización. La autorización contendrá como mínimo la siguiente información: El Tratamiento al que serán sometidos los datos personales y la finalidad específica del mismo. El tiempo por el cual serán tratados sus datos personales. Los derechos que le asisten como Titular. La página web, correo electrónico, dirección física y demás canales de comunicación por los cuales podrá formular consultas y/o reclamos ante anteia. anteia conservará las autorizaciones obtenidas en forma física o electrónica garantizando su consulta posterior. En caso de que se realice el tratamiento de datos sensibles o de niños y adolescentes se informará por parte de anteia el carácter de sensible que posee este tipo de información y se le dará la opción al titular de responder. 19. Peticiones, consultas o reclamos. Para efectos del ejercicio de los derechos del titular a conocer, actualizar, rectificar, y suprimir los datos personales que haya suministrado a El Cliente, este podrá contactar a El Cliente a través de los datos de notificación dispuestos por el mismo en su Política de Privacidad. A fin de interponer peticiones, consultas o reclamos subsidiarios a los presentados directamente al Cliente o frente a la autenticación de la identidad del titular de los datos, podrá contactar a anteia a través del correo electrónico pqr@anteia.co . En dicha comunicación, el titular deberá indicar la petición o derecho que se ejercita, nombre y apellidos del titular y los datos de contacto para recibir notificaciones. Este derecho se podrá ejercer, entre otros, frente a datos parciales, inexactos, incompletos, fraccionados, que induzcan a error, o aquellos cuyo tratamiento no haya sido autorizado por el titular. Por disposición legal, anteia dispone de diez (10) días hábiles para dar respuesta a las solicitudes, los cuales se pueden extender por un periodo de cinco (5) días hábiles cuando no fuere posible atender la consulta dentro del término dispuesto. Además de lo dispuesto en la presente Política, los procedimientos a seguir para la atención de consultas y reclamos serán los establecidos en la normatividad aplicable del territorio donde se realiza el tratamiento de datos. 20 . Transferencia y Transmisión Internacional de datos personales. anteia realiza la Transmisión o Transferencia internacional de los datos personales, para este caso anteia, además de contar con la autorización expresa e inequívoca por parte del Usuario Final se asegurará que la acción proporcione los niveles adecuados de protección de datos conforme a los parámetros de seguridad establecidos en la regulación donde se tratan los datos, las buenas prácticas y las señaladas por las autoridades. De otro lado, cuando anteia realice Transmisión Internacional de datos, podrá hacerlo sin autorización de los titulares, siempre y cuando garantice la seguridad de la información, confidencialidad y las condiciones que regulen el alcance del tratamiento de los datos. ya que, la divulgación a Encargados no requiere consentimiento (no se considera transmisión). El tercero receptor asumirá las mismas obligaciones que el responsable que transfirió los datos. Para este fin anteia suscribirá el correspondiente contrato de transmisión de datos personales en los términos establecidos por la regulación aplicable. Para la transmisión de datos, no se requiere consentimiento cuando: Sea necesaria para el cumplimiento de un contrato en interés del titular. Sea precisa para el mantenimiento o cumplimiento de una relación jurídica entre el responsable y el titular. Sea permitido según lo establecido en el artículo 16 de la Ley 1581 de 2012. 21. Ley Aplicable: Al usar cualquier servicio de anteia, usted acepta que la ley aplicable depende del Centro de Arbitraje en Colombia, las leyes sustanciales del país donde se origine la controversia y bajo los principios del Reglamento General de Protección de Datos (RGPD) [(UE) 2016/679 del Parlamento Europeo y de Consejo de 27 de abril de 2016.] 22. Cambios en esta política de privacidad La política se revisará de vez en cuando para tener en cuenta los cambios en nuestras operaciones o prácticas y, además, para asegurarse de que sigue siendo adecuada a cualquier cambio en la ley, la tecnología y el entorno empresarial. Toda la información personal que se conserve se regirá por nuestra política más actual. 23. Referencia Normativa La presente Política de Privacidad ha sido elaborada en concordancia con las siguientes normas: las leyes aplicables al territorio donde se hará el tratamiento de datos y el Reglamento (UE) 2016/679 del Parlamento Europeo y de Consejo de 27 de abril de 2016. Última actualización: Marzo de 2023
- anteia
1.Verificación multifactorial de identidad. 2.Identidad Digital. 3.Formularios y Contratos inteligentes. 4.Firma electrónica(fastSignature). 5.Motor de decisión. 6.Adjuntos y validación de autenticidad de documentos. 7.Pagarés. HOME HOME HYPERAUTOMATION SERVICES SERVICES API Política de privacidad PRICES Blog Resultados de la búsqueda Members MÁS ENG Hyperautomation Una integración para automatizar de extremo a extremo procesos de vinculación. Core ID 17 factores de verificación identidad que aseguran instantáneamente la confianza en clientes y proveedores. GeniusDocs Documentos, inteligentes, autogestionados, sin incongruencias, con monitoreo 7X24x365. smart signature Firmas seguras, para negocios hiper seguros. authenticator Adjuntar y validar documentos. NOT GOING Intelligent personal assistant para acompañar a usuarios en procesos de registro. cybersecurity mesh La frontera de la ciberseguridad. Próximamente Academy Próximamente Solicita tu DEMO A single provider A single integration a single platform before It is the first platform that hyper-automates linking and sales processes, taking away the headache for companies of dealing with new technologies, integrations, regulations, development team times and unaffordable prices. To play, press and hold the enter key. To stop, release the enter key. Copyright © 2023 anteia sas All rights reserved. ANS API Contacto API ANS Medium PQR PQR Terms and Conditions Privacy Policy Política de privacidad contacto@anteia.co Bogota DC, Colombia 118942 Colombia, Costa Rica, Panama
- Staff 001 | anteia sas
Julian Mora Chief Executive Officer Phone +57 300 301 3011 Mail julian@anteia.co
- SERVICIOS | anteia sas
Core ID Docs Firma Electrónica Valid xeia Servicios Solicita tu DEMO multiple factors A solid confidence G. lossario La verificación de identidad es el proceso de comprobación y confirmación de los datos e información proporcionados por una persona para determinar si son verdaderos y corresponden a su identidad real. La verificación de múltiples factores o multifactorial es un enfoque más seguro, ya que utiliza varios métodos para confirmar la identidad de una persona, en lugar de solo uno, esto reduce el riesgo de suplantación de identidad y aumenta la confianza en la verificación. Esta verificación es altamente personalizable para asegurar una alta convertibilidad, manteniendo altos niveles de seguridad. Conoce más Docs Servicio de procesamiento de documentos que permite: (1) Creación de documentos como formularios, contratos, pagarés, entre otros. (2) Análisis de texto para extraer información valiosa de los documentos, como datos personales, números, fechas, etc. (3) Clasificación de documentos que da la posibilidad de organizarlos automáticamente según diferentes categorías. (4) Reconocimiento óptico de caracteres (OCR) que permite digitalizar documentos en papel y convertirlos en archivos electrónicos. (5) Monitoreo de incongruencias de información y alertas de riesgo. Conoce más Firma electrónica La firma electrónica es un método digital para asociar a personas autenticadas con documentos digitales válidos. Se utiliza para verificar la identidad del remitente y garantizar la integridad y autenticidad del documento. Se basa en criptografía y tecnologías de seguridad. En el ecosistema de anteia, se realiza una verificación de identidad para asociar la identidad digital del firmante y garantizar la integridad y no repudio del documento. Nuestros métodos de validación incluyen reconocimiento facial y mensajería de texto con códigos de un solo uso, sin embargo, por el uso de la identidad digital, siempre hay una forma de verificar la identidad del firmante. Posee marcas de tiempo certificadas por autoridades confiables y puede ser verificada y almacenada por un largo tiempo. El proceso de firma electrónica requiere que todas las partes involucradas verifiquen su identidad y acepten las condiciones antes de generar el documento final, cumpliendo con las normativas relacionadas e integridad del documento. Conoce más Valid Servicio que utiliza técnicas de computer vision, aprendizaje automático y análisis de datos para identificar patrones y tendencias en documentos falsificados, analizar y comparar características visuales de un documento (como texto, imágenes, diseño y formato) con una base de datos de documentos auténticos conocidos. Tiene la capacidad de detectar características falsas o alteradas en un documento y emitir una advertencia o una respuesta si se determina que el documento no es auténtico. Permite adjuntar documentos de identidad, diplomas, facturas, certificados, declaraciones de renta o cualquier otro documento y validar su autenticidad. Convierte documentos no estructurados en estructurados. Convierte imágenes con texto en datos de texto legibles por computadoras. Conoce más xeia En un Intelligent personal Assistant que ayuda a los usuarios finales a cometer la menor cantidad de errores en su proceso de vinculación, a que puedan resolver problemas rápidamente y mejorar su experiencia de registro. Conoce más Services Authenticated Attachments. Allows you to attach identity documents, diplomas, invoices, certificates, income statements or any other document. Convert unstructured documents to structured to automate large-scale procurement data capture, increase operational efficiencies, improve customer experience, and inform decision-making by speeding and securing processes. Smart Contracts. Legal documents that can be generated automatically, stored securely on a blockchain, and have pre-programmed clauses that are automatically triggered under certain conditions, allowing for greater control and monitoring of the contract lifecycle. This can improve efficiency and security in contract management. Electronic signature. Mechanism that allows a person to be linked to an electronic message, contract or electronic document, identifying himself as a signatory of the message. Provides users with the ability to perform signatures, facilitates the distribution of legally sensitive documents for the collection of electronic signatures. Smart forms. Digital forms that are self-managed thanks to public and private sources of information, Optical Character Recognition (OCR), Intelligent character recognition (ICR) and other forms or documents from the same user. The authenticity of information is verified, updated and monitored through compliance alerts, dates and inconsistencies. Digital identity. Identity verification information is anonymized to reuse it in future events such as management of forms, contracts or electronic signatures, which allows streamlining processes and guaranteeing the security of information. Decision engine. Run automated decisions based on custom rules as a set of processes. It uses artificial intelligence and analysis to learn and redefine decisions. Dematerialized promissory notes. Mechanism that allows you to sign, fill out and endorse promissory notes supported by dematerialized technology (secure digitization), protected with an advanced electronic signature ensuring its validity. It allows the custody and completion of blank promissory notes for processing, using a secure trace for the parties, verifying the transactions made on the promissory note. Identity verification. Multiple verification factors ensure instantly that customers, employees, suppliers are really who they say they are. Facial and voice biometrics, proof of life, identity document authenticity, GPS, mobile number, Device ID, verification in binding and non-binding lists, search in public and private sources of information and credit history._cc781905-5cde-3194- bb3b-136bad5cf58d_ Solicita tu DEMO
- CORE ID | anteia
Core ID Terminología Beneficios Servicios Proceso de verificación Configuraciones Casos de uso Preguntas frecuentes Identidad digital Analytics Solicita tu DEMO Core ID Identity verification is the process of checking and confirming the data and information provided by a person to determine if they are true and correspond to their real identity. Multi-factor verification is a more secure approach, as it uses multiple methods to confirm a person's identity, rather than just one, reducing the risk of spoofing and increasing confidence in the verification._cc781905-5cde- 3194-bb3b-136bad5cf58d_ G. lossario anonymization. Process by which data is processed in such a way that it is not possible to relate it to the identity of a person or their personal data. Despite these processes, it is possible to perform technical and scientific analyzes on that data set. For compliance with anonymization standards, the data must be stripped of sufficient elements so that the data subject can no longer be identified, and therefore these data must be processed so that it is not possible to identify a person through the use of all reasonable means to be used by any other person. Authentication. Authentication is a process that confirms a person's identity in the digital world. For this, the user is related to one or more variables such as passwords, tokens, identification cards, fingerprints or biometric characteristics. These factors are classified into three types: known, object and biometric. Some systems also require specific actions for more secure authentication. Multifactor Authentication. Single-factor authentication systems, like passwords, are easy to manage but also more vulnerable due to users' choice of passwords. On the other hand, biometric systems are more secure, but they run the risk of being irreversible and linked to a person's anatomy. For the best security and convenience, the current trend is to use two-factor authentication (2FA) and multi-factor authentication (MFA) systems. Multi-factor authentication is an authentication system that requires the presence of several different factors to verify a person's identity. These factors include information known to the user (such as a password), objects in the user's possession (such as a token or ID card), and biometric characteristics (such as fingerprints or facial recognition). The combination of these factors provides additional security against unauthorized access to protected information or resources. Authorization. It consists of the security process to determine what actions or services can be performed according to the identity of the users. Biometrics. Application of statistical methods and calculation in the study of biological phenomena. In security it is used as a means to identify, authenticate and control access through measurable human biological data. There are various levels of biometric security with biological measurements (DNA and blood); morphological ones that involve the structure of the body (shape of the face, eyes, etc) and behavioral ones, those based on actions or patterns such as the tone of the voice or the way of moving. Biometric data is unique to each individual and is one of the best identity confirmation tools. By the way, the term biometrics comes from two Greek words: BIOS(life) and _cc781905-5cde- 3194-bb3b-136bad5cf58d_METRON (measured). Behavioral Biometrics. This is biometrics based on own actions or behaviors associated with a person. This includes typing pattern (formerly known as keystroke dynamics), tone of voice, use of social media, intensity of heartbeat, and even gait. cybercrime. It is any crime that involves computing devices and networks for carrying out illegal activities. More in detail, is usually used to talk about those activities directed against the confidentiality, integrity and availability of computer systems and networks, as well as the data stored in them. Confidentiality. It is the protection of information and the guarantee that the stored and transmitted data will not be disclosed to unauthorized third parties. In the digital age, confidentiality is strengthened through the use of cryptography to ensure data privacy. Deduplication. Mechanisms used to detect duplicate identities and ensure the uniqueness of people within a system or organization. The tools used in these processes generally include biometric recognition, biographical data, and the use of credentials. Availability. It is the guarantee that a company's IT infrastructure has adequate recovery and protection capacity against system failures, natural disasters or malicious attacks. It is the ability to access and use resources, be it a computer network, a system, an application or data, allowing its use to authorized persons. Face Match. Facial recognition or face matching system through which a user uses his biometric characteristics (his face) to authenticate his identity. This is one of the most used systems thanks to the popularization of smartphones and is frequently associated with the use of mobile applications (apps) and web platforms as a mechanism to keep accounts or transactions safe and secure. Authorized source. Repository, system, or database that contains information about an individual's attributes and is considered to be the primary or most reliable source for this information. When two or more identification systems present a conflict in their data, the authorized source is used as the most secure source of information in this regard. Identity. It is the set of characteristics of an individual, or of a community, that characterize them from others. In security it is used to talk about individuals and the attributes that make them unique. These variables include physical characteristics, personal history, beliefs, cultural, national, and gender factors, among other variables. Digital identity. Just as there is a physical identity, there is also a digital version made up of the unique attributes of each individual that are captured, validated or _cc781905-5cde-3194-bb3b -136bad5cf58d_stored by digital means. ID. Process of determining or recognizing the identity of someone or something. In the physical world, it is done through identity documents issued by governments. In the digital world, identification is a key process to confirm the identity of an online user. This process includes the registration of attributes and the issuance of credentials to facilitate the subsequent authentication process. Biometric Identification. It is the process of determining the identity of a person through the use of biometric data such as the shape of the face, the fingerprint or the pattern of walking, among other possibilities. This information is then compared with a database to verify the identity of said user. Despite the use of digital tools for the capture, recording and comparison of data, it must be taken into account that a biometric match is never exact and therefore a 100% match between the biometric template and the user's data will never be presented. As a consequence, margins must be established for the acceptance of matching patterns that obey a category called biometric threshold. Integrity. It refers to the state and accuracy of the data involved in a process. In other words, integrity requires that the data received must be exactly the same as the data sent. performance metrics. They are measurement systems used to determine the precision of the authentication processes. In biometrics the following stand out: False Acceptance Rate (FAR): the false acceptance rate or FAR is sometimes known as the false negative rate or FN. As its name indicates, it is related to unregistered users who, despite them, are erroneously admitted to the systems. False Rejection Rate (FRR): the false rejection rate or FRR is sometimes known as the false positive rate or FP. It is the opposite case of the FAR and occurs when the system denies access to an authorized user. Biometric recognition. Procedure, through the use of technological devices, to confirm the identity of people by comparing biological and behavioral attributes. Face recognition. It is a way of verifying the identity of a user by comparing their facial features with a database saved in a digital format. This technology has become popular due to its ease of use and its registration process that includes the measurements of the different parts of the face. The registered data is optimized and protected by algorithms to guarantee the security of the information. cyber security. Cybersecurity is the combination of people, policies, processes and technologies used by a company to protect its digital assets. There are various classifications ranging from security of the Internet of Things (IoT), to information security, among other classifications. Some of the most common threats are ransomware, malware, denial of service attacks, and phishing. Its use has changed its motives, and sides, from its beginnings, from being a tool for extortion and industrial espionage, to the sabotage of entire nations in conflict and a tool for cyber-activists. Identification system. It is about the set of practices, equipment, technological infrastructure, software, credentials and laws involved in the capture, management and use of personal identification data. Digital identification system. It is a technological platform used during the life cycle of an organization's identity. It covers from the capture, validation, storage and transfer of data, to the management of credentials, for their subsequent verification and authorization de identities. Error rate. Biometrics has a margin of error that is controlled through the definition of a threshold, which balances the false acceptance rate and the false rejection rate. A low threshold will increase the acceptance rate and decrease the rejection rate, which can be risky as there will be a greater chance of unauthorized persons gaining access to protected systems. Therefore, increasing the rejection rate reduces the risk of unauthorized access. Check. For the context of information technology and security, it is defined as the process of confirming the identity of a user or process by comparing their attributes or credentials to facilitate their authorization and access to services. Biometric verification. It is the verification process using biometric attributes for this purpose. With this objective, a capture of these variables is carried out, whose information is compared with a digitally stored biometric template. Benefits Reduce phishing fraud. Increase conversion rates. Combat money laundering, terrorist financing and online fraud. Valid authenticity of Information. It is the primary source for the collection of information in the creation of the digital identity of the users. Promotes AML/KYC and KYT compliance. By using multiple methods to confirm a person's identity, you reduce the risk of spoofing and increase confidence in the verification. By employing various methods to confirm identity, the risk of fraud and identity theft is reduced. Some regulations require multi-factor verification to meet security standards. Multi-factor verification allows users to use different methods to confirm their identity, providing a higher level of flexibility. It allows companies to scale their identity verification processes to accommodate a greater number of users or a greater variety of transactions. Reduces the amount of personal information that is stored and shared, helping to protect users' privacy. It gives users the possibility to authenticate on different devices, be it from a computer, a smartphone or a tablet, which makes the verification process easier. Reduces the time and costs associated with identity verification. By using multiple factors to confirm a person's identity, users and businesses can have more confidence that information is protected and secure. Benefits Reduce phishing fraud. Increase conversion rates. Combat money laundering, terrorist financing and online fraud. Valid authenticity of Information. It is the primary source for the collection of information in the creation of the digital identity of the users. Promotes AML/KYC and KYT compliance. By using multiple methods to confirm a person's identity, you reduce the risk of spoofing and increase confidence in the verification. By employing various methods to confirm identity, the risk of fraud and identity theft is reduced. Some regulations require multi-factor verification to meet security standards. Multi-factor verification allows users to use different methods to confirm their identity, providing a higher level of flexibility. It allows companies to scale their identity verification processes to accommodate a greater number of users or a greater variety of transactions. Reduces the amount of personal information that is stored and shared, helping to protect users' privacy. It gives users the possibility to authenticate on different devices, be it from a computer, a smartphone or a tablet, which makes the verification process easier. Reduces the time and costs associated with identity verification. By using multiple factors to confirm a person's identity, users and businesses can have more confidence that information is protected and secure. multiple factors A solid confidence Process of check multifactorial Although each phase of the process is adapted to the client's needs and several of these run simultaneously, the following schemes represent a standard model. settings DeviceID. The set of elements is captured. Optical Character Recognition (OCR). The client defines what elements he wants to capture and the type of document. The service allows human review. Face Match. According to the risk, the client defines what thresholds he wants. 30% to 79%. 80% to 89%. 90% to 94%. 95% to 100%. We recommend a minimum of 40%. The service allows human review. Liveness. According to the risk, the client defines what thresholds he wants. 50% to 79%. 80% to 89%. 90% to 94%. 95% to 100%. We recommend a minimum of 60%. The service allows human review. Document validity. According to the risk, the client defines what thresholds he wants for each subservice. 50% to 79%. 80% to 89%. 90% to 94%. 95% to 100%. We recommend a minimum of 70%. The service allows human review. Registration acceptance. Pass. The user complies with the pre-set configuration flags in the multi-factor authentication and verification matrix. In study. The user does not meet the pre-established configuration flags in the multi-factor verification and authentication matrix, but is within a tolerable margin to analyze the case. The customer makes the decision. It doesn't happen. The user does not meet the preset configuration flags in the multifactor authentication and verification matrix. Use cases In terms of new customer registration, multi-factor identity verification can be used in different industries and sectors to ensure the accuracy and security of customer personal information. Banking and finance. Multi-factor identity verification is an important process to ensure security and prevent fraud. This process is essential to protect clients' assets and financial information and to prevent unauthorized access to their accounts. Multi-factor verification may also be required to comply with government and compliance regulations, such as money laundering law. Electronic commerce. Clients must provide personal and financial information. Multi-factor identity verification helps ensure that only authorized people make purchases on a website. Educational institutions. They use multi-factor identity verification to ensure that only authorized individuals have access to sensitive education information. Identity verification may include verification of identification documents such as passports, driver's licenses or student cards, and may be a requirement for access to certain areas or resources of the institution. Likewise, it can be used to control access to computer systems, including grade and grade management applications, and to protect the privacy of students' personal and financial data. Health. Clients must provide personal and financial information. Multi-factor identity verification helps ensure that only authorized people have access to health services. Sure. Allows you to ensure that the person applying for insurance is who they say they are, which helps prevent fraud and maintain system integrity. It improves the customer experience, allows a faster and more convenient process for the customer, since it can be done online and without the need to go to an office. Regulatory Compliance Many regulations and laws require rigorous verification of identity before purchasing insurance, ensuring that customers' rights are protected and data protection regulations are adhered to. Protection of personal data, ensures that the client's personal and financial data is kept safe and secure. Government services. It guarantees security and protects the privacy of citizens. This process is essential to protect the sensitive and confidential information of citizens and to prevent unauthorized access to their personal and financial data. It may also be required to comply with government and privacy regulations, such as the personal data protection law. Telecommunications. Customers must provide personal and financial information. Multi-factor identity verification helps ensure that only authorized people have access to services. Transport and logistics. It is used to make sure that the people or companies that access certain services or resources are really who they say they are. This may include verification of the identity of truck drivers, authentication of shipments, and validation of the identity of shippers and recipients. By verifying the identity of the passengers, it can be ensured that the people traveling in a means of transport are the same ones that were registered in the system and that they comply with the security requirements. It may include verification of identification documents, criminal records, and security checks on watch lists. In addition, identity verification can also help prevent unauthorized entry and ensure supply chain integrity in the transportation of goods. Tourism. By verifying the identity of tourists, tourism service providers can ensure that the people who book and travel are really the ones who have registered. It may also help prevent unauthorized entry into certain tourist areas and may be required to comply with immigration and homeland security regulations. Identity verification can be done through the presentation of identification documents such as passports or driving licences, and can be a requirement when booking accommodation, excursions or flights. Frequent questions What types of documents do you accept for identity verification? We have the ability to train our visual computing algorithms to accept different types of identity documents, we especially support the official identity documents of each country, passports and driver's licenses, mainly in Latin America. How is the security and privacy of customer information guaranteed? We implement multiple data security strategies, and we maintain more than 35 security, privacy and data protection policies. We run drills and have an incident management policy. Finally, through our Data Fabric, we allow the information collected to be anonymized. What processes and technologies do you use to verify the authenticity of documents? We use different visual computing algorithms that allow us to process information from the captured documents, such as the sources, taxonomy and other characteristics of each one of them, on which the probability that the document is authentic is presented with a very high reliability. Do you offer any additional services or solutions to enforce identity verification, such as biometric authentication? Anteia's identity verification is intrinsically connected to biometric authentication, our process requires validation of both the document and the person, so that we can verify if the person agrees with the document. Do they have any experience or certifications in identity verification in a specific industry? We have experience with entities in the solidarity sector, banking, bonds, insurance, cargo transportation industry, among others. We follow biometric and identity verification standards, following the GDPR and ISO 27701 standards. What are the processing times for identity verification? It can take a user between 1 and 3 minutes to finish a verification process, our methods allow background processing while the user interacts with the application. Can you handle mass or large-scale identity verifications? Yes, we have a scalable system to make links based on the needs and capacity requirements of each client. Do you offer any kind of technical support or customer service to help with issues related to identity verification? Yes, in addition to a technical support service, we have automated support systems (intelligent personal assistant) that in a friendly way help users to successfully complete a linking process. Do they have experience verifying identity in different languages or for clients from different countries? Currently, we are expanding in Latin America to become a global solution that accommodates all the needs of languages and people from different countries. Do you offer integration with other platforms or systems to facilitate the identity verification process in a company's workflow? Our system is easy to integrate, which is why we offer multiple integration options that allow us to connect with various systems, so that the customer experience is the best. How is customer identity verification information handled and stored? We have multiple methods of information management and storage, through our Data Fabric we anonymize and pseudonymize sensitive user data to improve user privacy. We handle different types of connections and data transfer to deliver the information to the client in a secure manner. Do you have a process in place to handle fraud or unauthorized identity verification attempts? Our system analyzes the verification process and, in case of finding anomalies, generates alerts, all based on the client's parameterization, so that in those cases they can manually verify if the anomaly was caused by an attempted fraud. What kind of reports or statistics can you provide to help companies evaluate and improve their identity verification processes? One of the functionalities in the Backoffice is the possibility of evaluating, through graphs and consolidated information, the information from the verifications in different time ranges. This is particularly useful for learning the effectiveness of a new campaign, or seeing at a glance the number of people accepted into a particular flow. In case of fraud, are they responsible for the damage caused? Anteia is responsible for compliance with the configuration parameters of the verification matrix, in case of any system failure we are responsible In case of storing the information, and reaching a termination of the contract, does the transfer of the information generate a cost? Yes, the cost varies depending on the transfer method, since it must comply with the data transfer security requirements that we have in our policies. Do they validate the photograph of the document with the issuing entity? The information of the identity document is consulted, in the event that the issuing entities offer this service, it can be quoted. Does your platform work without internet? On the roadmap there is a version of certain services that allows you to operate without a live internet connection. This version, called "Eventual Connectivity", allows data capture without any Internet connection. This data is stored on the device until it has an internet connection. At that time, the data will be sent to our servers so that it can be verified and the process is completed. Do you have notifications sent by WhatsApp? In cases of need, it is used as a means of backup notifications. Is the platform modular? Yes, the anteia services can be obtained separately. How many checks can be performed per minute? The indicator per client is 57. digital identity It is a virtual and digital representation of a person on the Internet and other digital media, which includes personal and professional information, such as names, contact information, preferences and online activity. This information allows users to interact and conduct transactions online, resulting in a more convenient and efficient experience. It can be used by companies and organizations to personalize the user experience and improve the efficiency of their business processes. It is important to be aware of the privacy and security concerns associated with digital identity. Personal information online can be vulnerable to hacker attacks and other types of cybercrime, which can result in the loss of sensitive data and breach of privacy. Pseudonymization is a data privacy technique that aims to protect the privacy of individuals when processing their personal data. It is achieved through the replacement of a person's unique identifiers, such as their name, address, identification number, etc., with an artificial identifier, such as an alias or code. This process allows the processing of personal data without exposing the real identifiers of the person, reducing the risk of re-identification and, therefore, the violation of privacy. Anteia implements an exhaustive pseudonymization process to protect the privacy of individuals and comply with regulations and data protection standards. The process includes identification of sensitive data, creation of an artificial identifier and its encryption, replacement of unique identifiers with the encrypted identifier, validation of pseudonymization, secure storage and use of pseudonymous data, and documentation. and process audit. We use the SHA-256 hashing algorithm to ensure data integrity and generate a unique hash. We pseudonymize the identity verification data. We create a digital identity. Services such as Geneus Docs and SecurSing orbit around it. multiple factors A solid confidence multiple factors A solid confidence multiple factors A solid confidence digital identity It is a virtual and digital representation of a person on the Internet and other digital media, which includes personal and professional information, such as names, contact information, preferences and online activity. This information allows users to interact and conduct transactions online, resulting in a more convenient and efficient experience. It can be used by companies and organizations to personalize the user experience and improve the efficiency of their business processes. It is important to be aware of the privacy and security concerns associated with digital identity. Personal information online can be vulnerable to hacker attacks and other types of cybercrime, which can result in the loss of sensitive data and breach of privacy. Pseudonymization is a data privacy technique that aims to protect the privacy of individuals when processing their personal data. It is achieved through the replacement of a person's unique identifiers, such as their name, address, identification number, etc., with an artificial identifier, such as an alias or code. This process allows the processing of personal data without exposing the real identifiers of the person, reducing the risk of re-identification and, therefore, the violation of privacy. Anteia implements an exhaustive pseudonymization process to protect the privacy of individuals and comply with regulations and data protection standards. The process includes identification of sensitive data, creation of an artificial identifier and its encryption, replacement of unique identifiers with the encrypted identifier, validation of pseudonymization, secure storage and use of pseudonymous data, and documentation. and process audit. We use the SHA-256 hashing algorithm to ensure data integrity and generate a unique hash. We pseudonymize the identity verification data. We create a digital identity. Services such as Geneus Docs and SecurSing orbit around it. Solicita tu DEMO
- CIBERSECURITY MESH | anteia sas
| anteia Cibersecurity Mesh Beneficios Glosario ¿Cómo funciona? Configuración Proceso Casos de uso Preguntas frecuentes Regulación Analytics Compra Api beyond integration Experience the power of hyper automation Cybersecurity Mesh A cybersecurity model is a set of policies, procedures, and technologies designed to protect a computer system and associated data against security threats. Cybersecurity models are based on a proactive approach to security management, which includes threat identification, risk assessment, implementation of security measures, and continuous monitoring to detect and respond to attacks. A good cybersecurity model is effective in preventing and detecting threats, but it must also be flexible and scalable to adapt to changes in technology and threats. You need to consider both traditional security technologies, such as firewalls and intrusion detection systems, as well as new technologies, such as artificial intelligence and the cloud. In addition to technology, an effective cybersecurity model must include strong security management practices, such as staff training and security awareness, backup and disaster recovery planning, and data security policy. It is also important to consider compliance with relevant security regulations and standards, such as PCI DSS and HIPAA. An organization's cybersecurity model should be regularly reviewed and updated to keep up with the latest threats and trends in security technology. This includes the continuous evaluation and improvement of security policies and practices, the training of personnel, and the continuous monitoring of the network and systems to detect and respond to threats. Our Architecture is an innovative approach to protect networks and computer systems against security threats. Instead of relying on a centralized security solution, it distributes protection across multiple layers that work together to ensure complete network security. It is an effective and sophisticated approach to protect networks and computer systems against security threats. It offers defense-in-depth, early threat detection, flexibility and scalability, and reduced vulnerability to attack. All of this helps ensure the security and continuity of network services. It offers flexibility and scalability, which means it can adapt to and grow with an organization's changing security needs. Additionally, the decentralized nature of the security mesh makes it less vulnerable to attacks that exploit weaknesses in centralized systems. Benefits Allows multiple signers. Allows you to sign documents faster and more efficiently compared to scribble signatures. Helps protect the confidentiality and integrity of documents. It is more affordable than signing on paper and can reduce the costs associated with managing paper documents and physically mailing them. Documents can be signed from anywhere at any time, which is more convenient than having to be in a specific place to sign on paper. The electronic signature reduces the use of paper and shipping costs, which contributes to an environmentally sustainable practice. It gives the possibility to people with disabilities to sign documents in a more accessible way. It allows for greater transparency and traceability in document management, which can be useful in audits and reviews. It can be easily integrated with other systems and applications, increasing the efficiency and effectiveness of document management. It allows the automation of processes and the elimination of human errors, which increases the precision and speed of document management. You can make adjustments and updates in real time, increasing flexibility and adaptability in document management. Reduces the risk of document loss, damage or theft, increasing security and reliability in document management. Access and manage documents faster and more efficiently, which improves productivity and efficiency. It is compatible with mobile devices, allowing greater mobility and flexibility in document management. G. lossario Cryptographic algorithm. It is a mathematical process that is used to encrypt and decrypt messages and to generate cryptographic keys. Authentication. It is the process of verifying the identity of a user. Self signature. It is an electronic signature that is made without the intervention of a certification authority. Certification authority (CA). It is an entity that issues and manages digital certificates. Digital certificate. It is an electronic file that contains information about a user's identity and their public key. Root certificate. It is a certificate that is the root of trust in a public key infrastructure. public key. It is a cryptographic key that is used to encrypt messages and to verify the identity of a user. private key. It is a cryptographic key that is used to decrypt messages and to sign electronic documents. encryption. It is the process of encoding a message so that it can only be decrypted by the recipient. Signature with time stamp. It is an electronic signature that includes a time stamp that shows the date and time the signature was made. Digital signature. It is an electronic representation of a signature, which is used to authenticate electronic documents. Electronic signature. It is an electronic representation of a handwritten signature, used to authenticate electronic documents. Advanced electronic signature (FEA). It is a type of electronic signature that provides a high level of security and trust. Recognized electronic signature (FER). It is an electronic signature that meets the legal requirements to be recognized as equivalent to a handwritten signature. Multiple signature. It is an electronic signature that is made by more than one person. hash. It is a unique representation of a message, which is used to verify the integrity of an electronic document. Public Key Infrastructure (PKI). It is a set of procedures, protocols and services used to create, manage and validate digital certificates. Integrity. It is the guarantee that an electronic document has not been altered since it was signed. I do not repudiate It is the guarantee that a user cannot deny having signed an electronic document. Security token. It is a physical device or software that stores private keys and is used to sign electronic documents. Timestamp. It is a timestamp that is added to an electronic document to show the date and time it was signed. Certificate validation. It is the process of checking the validity of a digital certificate. Check. It is the process of checking the validity of an electronic signature. How does it work? Setting Missing to define the format for tables Process Missing to define the format for tables Use cases Financial legal contracts and agreements. Billing and monitoring of payments in the accounting sector. Job application forms and monitoring of the hiring process in human resources. Requests for orders and monitoring of the supply chain in companies of logistics. Medical forms and record of clinical histories. Applications for enrollment and monitoring of students. Travel request forms and travel management. Credit applications and loan monitoring. Insurance application forms and claims tracking. Requests for inspection and monitoring of products in the manufacturing industry. Requests for acquisition and monitoring of real estate. Loan contracts, investment agreements, credit card applications. Real estate. purchase-sale contracts, rental contracts, property deeds. Medical consents, electronic medical records, medical prescriptions. Permit applications, public service contracts. Software license agreements, cloud service provider agreements, outsourcing agreements. Enrollment applications, teacher contracts, professional internship agreements. Transport contracts, delivery agreements, storage agreements. Insurance policies, reimbursement requests, indemnity agreements. Supply agreements, purchase contracts, technology license agreements. Online purchase agreements, subscription contracts, affiliate agreements. Hotel reservation contracts, vacation rental contracts, catering agreements. Input supply agreements, crop sales contracts, land lease agreements. Frequent questions What is the difference between digital and electronic signature? The electronic signature refers to the authentication and validation of documents in digital format through cryptography and security technologies, while the digital signature refers to a signature in digital format, but which does not necessarily have the same levels of security and authenticity than an electronic signature. That is, the electronic signature is a specific type of digital signature that meets certain security and reliability standards. What types of electronic signatures are there? Simple electronic signature. Electronic representation of a handwritten signature, used to authenticate electronic documents. Digital signature. Electronic representation of a signature, used to authenticate electronic documents. Advanced electronic signature (FEA). It is a type of electronic signature that provides a high level of security and trust. Recognized electronic signature (FER). Electronic signature that meets the legal requirements to be recognized as equivalent to a handwritten signature. Self signature. Electronic signature that is carried out without the intervention of a certification authority. Multiple signature. It is done by more than one person. Signature with time stamp. Electronic signature that includes a time stamp that shows the date and time the signature was made. What documents can be signed electronically? Any document that can be stored in electronic format can be signed electronically. This includes contracts, invoices, legal documents, official documents, work documents, among others. The electronic signature allows authenticating and verifying the integrity of these documents, which gives them legal validity and provides them with a higher level of security. How is the authenticity of an electronic signature verified? It is verified using the public key corresponding to the signature. The process consists of decrypting the information signed with the public key and comparing it with the original document to verify that the signature is valid and has not been altered. It can be verified that the digital certificate used to sign is valid and has not expired. This verification can be done by specialized software or through a certification authority. What requirements must be met to perform an electronic signature? To perform an electronic signature, several requirements must be met, such as having a verified identity and a digital certificate issued by a trusted certification authority, using cryptographic keys (a public key to encrypt messages and verify the identity of a user, and a private key to decrypt messages and sign electronic documents), have an application or device that allows electronic signatures to be performed and meets the required security standards, adequately protect private keys, comply with the rules and regulations applicable in the country or jurisdiction where it is performed the electronic signature, and have a public key infrastructure (PKI) that allows validating the electronic signature and guaranteeing trust in it. How is the security of electronic signatures guaranteed? A series of requirements must be met, such as having a verified identity and a digital certificate issued by a trusted certification authority, using cryptographic keys, having an application or electronic signature device that complies with security standards, adequately protecting private keys , comply with applicable rules and regulations, have a public key infrastructure (PKI), and use encryption and authentication techniques to protect the integrity of electronically signed documents. In addition, it is important to keep electronic signature software and devices up to date to avoid potential security vulnerabilities. How is the electronic signature integrated into business processes? The electronic signature can be integrated into business processes through the automation and digitization of the processes that require the signing of documents. This may include the creation of electronic forms for the collection of information and the signing of the same, the implementation of approval workflows that allow the signing of documents online and the integration of the electronic signature with document management and information management systems. business processes. In addition, it is important to guarantee the integrity and security of the documents and the electronic signature through adequate security measures, such as data encryption and user authentication. What happens if the device used for the electronic signature is lost or damaged? How is an electronic signature revoked? How is the privacy of electronic signatures guaranteed? How is the integrity of electronically signed documents carried out? How can non-repudiation be guaranteed in electronic signatures? What systems or technologies are used for the electronic signature? How is the authentication of users who perform electronic signatures performed? How can electronic signatures be stored and managed? What legal implications does the electronic signature have? Is the electronic signature valid in any country? What support does the electronic signature have? What are the mechanisms to sign? Biometric fingerprint and OTP. Can you sign multiple documents simultaneously? How many signatures can I put on a document? Do you have end user support? Regulation Argentina. The electronic signature in Argentina is regulated by the Electronic Signature Law 26. electronic signature No. 26.199, which establishes the rules for the use of electronic signatures, certifications and public key infrastructure. Brazil. The regulation of electronic signatures in Brazil is established in Law No. 12,651/2012, which establishes the rules for the use and validity of electronic signatures, as well as the responsibility of service providers electronic signature. Chili. The regulation of electronic signatures in Chile is established in Law No. 19,799, which establishes the rules for the use of electronic signatures, certifications, and public key infrastructure. Mexico. The regulation of the electronic signature is established in the Law of Electronic Signature (Law of Information Technology and Electronic Commerce) and its regulations (Regulation of the Law of Electronic Signature). These laws establish the rules for the use of electronic signatures, certifications and public key infrastructure. In addition, they establish the responsibilities and obligations of electronic signature service providers and establish the procedures for the verification and validity of electronic signatures. Advanced and recognized firms are also regulated. Costa Rica. It is established in the Electronic Signature and Electronic Documents Law (Law 8968) and its regulations. This law establishes the rules for the use of electronic signatures, certifications and public key infrastructure. In addition, it establishes the responsibilities and obligations of electronic signature service providers and establishes the procedures for the verification and validity of electronic signatures. Advanced and recognized firms are also regulated. In Costa Rica there is an entity in charge of regulating and supervising the electronic signature is the IFT (Costa Rican Electricity Institute). Colombia. The regulation of the electronic signature is established in Law 527 of 1999 and its regulatory decree 2364 of 2012, known as the "Electronic Signature Law". This law establishes the rules for the use of electronic signatures, making clear the concept of signature "Methods such as codes, passwords, biometric data, or private cryptographic keys, which allow to identify a person, in relation to a message of data, as long as it is reliable and appropriate with respect to the purposes for which the firm is used, taking into account all the circumstances of the case, as well as any pertinent agreement. Taking into account that in the case of electronic signatures, unlike the digital signature, there is no third-party certifier, under the legal framework establish the responsibilities and obligations of the providers, as well as the general standards of verification and validity. Panama. It is established in Law 41 of 2007, which establishes the rules for the use of electronic signatures, certifications and public key infrastructure. The law establishes the responsibilities and obligations of electronic signature service providers and establishes the procedures for the verification and validity of electronic signatures. Advanced and recognized firms are also regulated. Ecuador. The regulation of the electronic signature is established in the Law of Electronic Signature and Electronic Documents (Law of Information Technology and Electronic Commerce) and its regulations. These laws establish the rules for the use of electronic signatures, certifications and public key infrastructure. In addition, they establish the responsibilities and obligations of electronic signature service providers and establish the procedures for the verification and validity of electronic signatures. Advanced and recognized firms are also regulated. In Ecuador there is also the National Electronic Signature Certification System (SNCFE) which is in charge of issuing and revoking electronic signature certificates. Peru. The regulation of the electronic signature is established in the Electronic Signature and Electronic Documents Law (Law 27269) and its regulations. These laws establish the rules for the use of electronic signatures, certifications and public key infrastructure. In addition, they establish the responsibilities and obligations of electronic signature service providers and establish the procedures for the verification and validity of electronic signatures. Advanced and recognized firms are also regulated. In Peru, there is an entity in charge of regulating and supervising the electronic signature: OSIPTEL (Supervisory Agency for Private Investment in Telecommunications). Analytics Number of documents signed, number of active users, average session duration. Response times, error rate, level of availability. Number of users, roles and permissions assigned, level of user activity. Average time to perform an electronic signature. Number of valid and invalid certificates, certificate validation success rate. Integration with other systems. Number of integrations made, types of integrated systems (CRM, ERP, etc.), level of success of the integrations. Number of successful and failed signatures, overall success rate. Level of user satisfaction, pain points and problems reported, level of adoption of the platform. Number of users who access the platform from mobile devices, types of devices used. Geography. Geographic location of users and signed documents, analysis of geographic trends. Total cost of implementation and use of the service, costs per user and per signed document. Trends in the use of the platform, trends in user satisfaction, trends in the adoption of new features. Documents created, shared and collaborative. Average time per document. Buys Still missing from the document api Still missing from the document
- Contacto | anteia
Contacto Un sólo proveedor Una sola integración Una sola plataforma anteia es la primera plataforma que hiper automatiza procesos de vinculación y ventas quitándoles el dolor de cabeza a las empresas de lidiar con nuevas tecnologías, integraciones, regulaciones, tiempos de equipo de desarrollos y precios inasequibles. Dale velocidad y seguridad a tus negocios con la Identidad Digital Avanzada de anteia Completa los datos y empieza a vivir la experiencia del poder oculto de la integración con anteia a través de un laboratorio de nuestras soluciones para tu empresa Accede a nuestra IMPLEMENTACIÓN GRATUITA solicitándola en este formulario Nombre Apellidos Empresa Email corporativo Industria Elige una opción Si elegiste otro dinos cual No. Celular Cargo Cuéntanos un poco más... Acepto los términos y condiciones Enviar Gracias. Estaremos en contacto pronto.
- AUTHENTIKATOR | anteia
Valid Terminología Beneficios Proceso Casos de uso FAQ Analytics Solicita tu DEMO It is a digital method to authenticate and validate electronic documents. It is used to verify the identity of the sender and guarantee the integrity and authenticity of the document. The electronic signature is based on cryptography and security technologies. In many countries, it is legally valid as a handwritten signature on paper. The implementation of the electronic signature has improved the efficiency and speed of document management, reducing costs and work. In the Anteia ecosystem, an identity verification is carried out to associate a certificate with the digital identity of the signer and guarantee the integrity and non-repudiation of the document. Our validation methods include facial recognition and text messaging with one-time codes. It has time stamps certified by reliable authorities and can be verified and stored for a long time. The electronic signature process requires that all parties involved verify their identity and accept the conditions before generating the final document, complying with regulations and integrity. Core ID G. lossario Cryptographic algorithm. It is a mathematical process used to encrypt and decrypt messages and to generate cryptographic keys. Authentication. It is the process of verifying the identity of a user. Self signature. It is an electronic signature that is made without the intervention of a certification authority. Certification authority (CA). It is an entity that issues and manages digital certificates. Digital certificate. It is an electronic file that contains information about a user's identity and their public key. Root certificate. It is a certificate that is the root of trust in a public key infrastructure. public key. It is a cryptographic key that is used to encrypt messages and to verify the identity of a user. private key. It is a cryptographic key that is used to decrypt messages and to sign electronic documents. encryption. It is the process of encoding a message so that it can only be decrypted by the recipient. Signature with time stamp. It is an electronic signature that includes a time stamp that shows the date and time the signature was made. Digital signature. It is an electronic representation of a signature, which is used to authenticate electronic documents. Electronic signature. It is an electronic representation of a handwritten signature, used to authenticate electronic documents. Advanced electronic signature (FEA). It is a type of electronic signature that provides a high level of security and trust. Recognized electronic signature (FER). It is an electronic signature that meets the legal requirements to be recognized as equivalent to a handwritten signature. Multiple signature. It is an electronic signature that is made by more than one person. hash. It is a unique representation of a message, which is used to verify the integrity of an electronic document. Public Key Infrastructure (PKI). It is a set of procedures, protocols and services used to create, manage and validate digital certificates. Integrity. It is the guarantee that an electronic document has not been altered since it was signed. I do not repudiate It is the guarantee that a user cannot deny having signed an electronic document. Security token. It is a physical device or software that stores private keys and is used to sign electronic documents. Timestamp. It is a timestamp that is added to an electronic document to show the date and time it was signed. Certificate validation. It is the process of checking the validity of a digital certificate. Check. It is the process of checking the validity of an electronic signature. Benefits Allows multiple signers. Allows you to sign documents faster and more efficiently compared to scribble signatures. Helps protect the confidentiality and integrity of documents. It is more affordable than signing on paper and can reduce the costs associated with managing paper documents and physically mailing them. Documents can be signed from anywhere at any time, which is more convenient than having to be in a specific place to sign on paper. The electronic signature reduces the use of paper and shipping costs, which contributes to an environmentally sustainable practice. It gives the possibility to people with disabilities to sign documents in a more accessible way. It allows for greater transparency and traceability in document management, which can be useful in audits and reviews. It can be easily integrated with other systems and applications, increasing the efficiency and effectiveness of document management. It allows the automation of processes and the elimination of human errors, which increases the precision and speed of document management. You can make adjustments and updates in real time, increasing flexibility and adaptability in document management. Reduces the risk of document loss, damage or theft, increasing security and reliability in document management. Access and manage documents faster and more efficiently, which improves productivity and efficiency. It is compatible with mobile devices, allowing greater mobility and flexibility in document management. multiple factors A solid confidence Benefits Allows multiple signers. Allows you to sign documents faster and more efficiently compared to scribble signatures. Helps protect the confidentiality and integrity of documents. It is more affordable than signing on paper and can reduce the costs associated with managing paper documents and physically mailing them. Documents can be signed from anywhere at any time, which is more convenient than having to be in a specific place to sign on paper. The electronic signature reduces the use of paper and shipping costs, which contributes to an environmentally sustainable practice. It gives the possibility to people with disabilities to sign documents in a more accessible way. It allows for greater transparency and traceability in document management, which can be useful in audits and reviews. It can be easily integrated with other systems and applications, increasing the efficiency and effectiveness of document management. It allows the automation of processes and the elimination of human errors, which increases the precision and speed of document management. You can make adjustments and updates in real time, increasing flexibility and adaptability in document management. Reduces the risk of document loss, damage or theft, increasing security and reliability in document management. Access and manage documents faster and more efficiently, which improves productivity and efficiency. It is compatible with mobile devices, allowing greater mobility and flexibility in document management. Use cases Financial legal contracts and agreements. Billing and monitoring of payments in the accounting sector. Job application forms and monitoring of the hiring process in human resources. Requests for orders and monitoring of the supply chain in companies of logistics. Medical forms and record of clinical histories. Applications for enrollment and monitoring of students. Travel request forms and travel management. Credit applications and loan monitoring. Insurance application forms and claims tracking. Requests for inspection and monitoring of products in the manufacturing industry. Requests for acquisition and monitoring of real estate. Loan contracts, investment agreements, credit card applications. Real estate. purchase-sale contracts, rental contracts, property deeds. Medical consents, electronic medical records, medical prescriptions. Permit applications, public service contracts. Software license agreements, cloud service provider agreements, outsourcing agreements. Enrollment applications, teacher contracts, professional internship agreements. Transport contracts, delivery agreements, storage agreements. Insurance policies, reimbursement requests, indemnity agreements. Supply agreements, purchase contracts, technology license agreements. Online purchase agreements, subscription contracts, affiliate agreements. Hotel reservation contracts, vacation rental contracts, catering agreements. Input supply agreements, crop sales contracts, land lease agreements. Frequent questions What is the difference between digital and electronic signature? The electronic signature refers to the authentication and validation of documents in digital format through cryptography and security technologies, while the digital signature refers to a signature in digital format, but which does not necessarily have the same levels of security and authenticity than an electronic signature. That is, the electronic signature is a specific type of digital signature that meets certain security and reliability standards. What types of electronic signatures are there? Simple electronic signature. Electronic representation of a handwritten signature, used to authenticate electronic documents. Digital signature. Electronic representation of a signature, used to authenticate electronic documents. Advanced electronic signature (FEA). It is a type of electronic signature that provides a high level of security and trust. Recognized electronic signature (FER). Electronic signature that meets the legal requirements to be recognized as equivalent to a handwritten signature. Self signature. Electronic signature that is carried out without the intervention of a certification authority. Multiple signature. It is done by more than one person. Signature with time stamp. Electronic signature that includes a time stamp that shows the date and time the signature was made. What documents can be signed electronically? Any document that can be stored in electronic format can be signed electronically. This includes contracts, invoices, legal documents, official documents, work documents, among others. The electronic signature allows authenticating and verifying the integrity of these documents, which gives them legal validity and provides them with a higher level of security. How is the authenticity of an electronic signature verified? It is verified using the public key corresponding to the signature. The process consists of decrypting the information signed with the public key and comparing it with the original document to verify that the signature is valid and has not been altered. It can be verified that the digital certificate used to sign is valid and has not expired. This verification can be done by specialized software or through a certification authority. What requirements must be met to perform an electronic signature? To perform an electronic signature, several requirements must be met, such as having a verified identity and a digital certificate issued by a trusted certification authority, using cryptographic keys (a public key to encrypt messages and verify the identity of a user, and a private key to decrypt messages and sign electronic documents), have an application or device that allows electronic signatures to be performed and meets the required security standards, adequately protect private keys, comply with the rules and regulations applicable in the country or jurisdiction where it is performed the electronic signature, and have a public key infrastructure (PKI) that allows validating the electronic signature and guaranteeing trust in it. How is the security of electronic signatures guaranteed? A series of requirements must be met, such as having a verified identity and a digital certificate issued by a trusted certification authority, using cryptographic keys, having an application or electronic signature device that complies with security standards, adequately protecting private keys , comply with applicable rules and regulations, have a public key infrastructure (PKI), and use encryption and authentication techniques to protect the integrity of electronically signed documents. In addition, it is important to keep electronic signature software and devices up to date to avoid potential security vulnerabilities. How is the electronic signature integrated into business processes? The electronic signature can be integrated into business processes through the automation and digitization of the processes that require the signing of documents. This may include the creation of electronic forms for the collection of information and the signing of the same, the implementation of approval workflows that allow the signing of documents online and the integration of the electronic signature with document management and information management systems. business processes. In addition, it is important to guarantee the integrity and security of the documents and the electronic signature through adequate security measures, such as data encryption and user authentication. What happens if the device used for the electronic signature is lost or damaged? How is an electronic signature revoked? How is the privacy of electronic signatures guaranteed? How is the integrity of electronically signed documents carried out? How can non-repudiation be guaranteed in electronic signatures? What systems or technologies are used for the electronic signature? How is the authentication of users who perform electronic signatures performed? How can electronic signatures be stored and managed? What legal implications does the electronic signature have? Is the electronic signature valid in any country? What support does the electronic signature have? What are the mechanisms to sign? Biometric fingerprint and OTP. Can you sign multiple documents simultaneously? How many signatures can I put on a document? Do you have end user support? Analytics Number of documents signed, number of active users, average session duration. Response times, error rate, level of availability. Number of users, roles and permissions assigned, level of user activity. Average time to perform an electronic signature. Number of valid and invalid certificates, certificate validation success rate. Integration with other systems. Number of integrations made, types of integrated systems (CRM, ERP, etc.), level of success of the integrations. Number of successful and failed signatures, overall success rate. Level of user satisfaction, pain points and problems reported, level of adoption of the platform. Number of users who access the platform from mobile devices, types of devices used. Geography. Geographic location of users and signed documents, analysis of geographic trends. Total cost of implementation and use of the service, costs per user and per signed document. Trends in the use of the platform, trends in user satisfaction, trends in the adoption of new features. Documents created, shared and collaborative. Average time per document. Solicita tu DEMO

