Important Security Features

eVault is designed to keep documents secure, tamper-proof, and legally defensible across the full document lifecycle. The platform is aligned with UETA, ESIGN, and UCC 9-105. Embedded audit trails meet the standards expected by regulators, rating agencies, trustees, and internal stakeholders.

The single authoritative copy

Every signed document in eVault has one official, cryptographically verified version.

• There is only one: Only one authoritative version exists at any time, and the system never duplicates it.
• You see a viewing copy: The portal shows you a safe copy for reading. The original is stored securely in the background.
• It cannot be altered: The system automatically detects any unauthorized change to a document, even at the database level.
• Transfers move it, they do not copy it: When a document is transferred to another vault, the original moves. The sending vault retains only a record of the transfer.

Concord's eVault is aligned with the core legal standards for electronic document custody: UETA, ESIGN, and UCC 9-105.

The audit trail

Every action on every package is permanently and immutably recorded in the history section.

The system shows:

• Who uploaded the package and what time the package was uploaded.
• Who viewed or downloaded the package.
• When the package was transferred and to whom.
• When prints or extractions were requested.
• Any notes added or field changes made.

This history can be used as legal evidence of document custody in court proceedings, regulatory audits, or compliance reviews.

Tamper protection

eVault uses cryptographic hashing and multiple layers of protection to ensure documents cannot be altered.

• Automatic tamper detection: The system immediately flags any change to a document.
• Tamper-evident certified prints: Certified prints prove the document has not been modified since it was produced.
• Permanent packages: Once a document is added to a package, it cannot be removed or edited.

Sensitive data protection

If Concord has enabled this feature for your vault, the system automatically redacts personal information when documents are uploaded. Redacted information includes Social Security numbers, bank account numbers, and personal addresses. Your administrator controls redaction settings.

Access controls

• You can only see documents within your own organization.
• You may be required to accept terms of use before accessing certain features.
• All sessions are secured with either SSO or with email and password plus two-factor authentication (2FA).
• Downloaded documents may include a watermark that identifies them as eVault copies.

Next: Package Management. Continue with Package Management.