Why is it safe to sign using the Cincel suite?

At Cincel, data security and privacy are fundamental pillars. We have designed our platform with multiple protection measures and filters, along with cutting-edge technologies, to ensure your documents and all associated information remain secure, intact, and with full legal validity.

 

---

Our commitment to digital security for our clients is based on several fundamental pillars:

1.    Cutting-edge infrastructure and secure encryption

Your information rests on a solid foundation:

• AWS Hosting: Cincel is hosted on Amazon Web Services (AWS), the world-leading cloud service provider. AWS is recognized for its strict physical and logical security standards and is used by organizations that handle highly sensitive data, including Netflix, Twitch, and LinkedIn. This ensures continuous service availability and robust protection against threats.

• SSL/TLS Encryption: All communications between your device and the Cincel platform travel encrypted via the SSL/TLS protocol. This ensures that your data is protected against interception and manipulation while transmitted over the internet.

 

---

2.    Documentary Integrity and Authenticity

Cincel employs advanced mechanisms to ensure that your documents are not altered and that signatures are authentic and irrefutable:

• Secure management of e.firma (FIEL):

• No storage: When you sign with your e.firma, Cincel never saves your .CER and .KEY files, nor your password. These files are temporarily loaded into your browser during the signing process and are immediately deleted after use. This measure guarantees that only you have absolute control over your e.firma, preventing any misuse by third parties or the platform itself. Therefore, you must upload them every time you use them to sign, thus ensuring exclusive use by the holder.

• Indicated use: We facilitate the use of advanced signatures without compromising their security, ensuring that cryptographic validation is performed safely.

• Detailed Audit Trail: Every document signed in Cincel generates an "Audit Trail." This irrefutable digital certificate precisely records every action and relevant event of the signing process, including:

• Unique document identifier (Hash SHA256).

• Document data (title, author, creation and completion dates).

• Signers' information (name, signature type, IP address, identity verification performed, etc.).

• Certification details (NOM-151 certificate, Blockchain notarization).

This trail serves as solid evidentiary proof in case of disputes.

• Notarization with Blockchain technology: As an additional security measure and proof of unalterable existence, documents certified with Cincel are "notarized" using public blockchains (Bitcoin).
• A cryptographic hash (SHA256) of the document is generated.
• This hash is integrated into the blockchain with a "timestamp."
• This creates a publicly verifiable proof that the document existed on a specific date and time, and that it has not been altered since then. The distributed nature of the blockchain ensures that this proof is virtually immutable and accessible globally.
• NOM-151 Conservation Certificate: For documents requiring maximum legal validity in Mexico (Smart Certificate), Cincel issues a Data Message Conservation Certificate. This certificate is generated by a PSC accredited by the Ministry of Economy of Mexico, granting the document with Certain Date and presumption of integrity before any Mexican authority, complying with NOM-151-SCFI-2016.

 

---

3.    Mexican and international legal compliance

We operate under a strict legal framework to provide you with legal certainty:

• Legal validity in legal and judicial proceedings: Documents signed through Cincel are valid and admissible as evidence in legal proceedings in Mexico, according to the Commercial Code and the Federal Code of Civil Procedure. Probatory strength is reinforced by our certifications and audit trails.

• International Compatibility: In addition to complying with Mexican regulations, documents signed and certified with Cincel are compatible with key international standards such as ISO/IEC and ETSI TS, ensuring their recognition and reliability globally.

 

---

4.     Access Control and Privacy

We keep your information accessible only to those who should see it:

• Controlled access to documents: Only users invited to sign, observers, and your team members with defined roles (Administrator, Editor, Reader) have access to specific documents. Cincel guarantees that no one else can see or access your agreements.

• Specific User Roles: Within Cincel, you can assign specific roles to your team members (Administrator, Editor, Reader). This allows you to control who can create, edit, delete, or simply view documents and folders, reinforcing internal security.

• Privacy Notice: We are committed to the protection of your personal data. We invite you to review our Privacy Notice to understand how we collect, use, and protect your information.