Information security in Express
We know how important information security is for our customers. All your messages, calls, conferences and files are fully encrypted. eXpress uses various methods and security protocols to ensure the protection of your data.
Get a demo-
Multi-layer end-to-end encryption of all data and metadata
-
Secure on-premise servers for enterprise customers
-
Support for enhanced qualified electronic signature on demand
-
Audited cryptographic security
Data protection in eXpress
User authentication
via 3 completely independent channels
SMS OTP
(linked to a phone number)
Personal user password
(inaccessible by system administrators)
Enterprise account
in Active Directory (NTLMv2 end-to-end authentication or one-time password from the corporate email)
Crypto container
Data storage and mobile application management
Encrypted storage of all data on a mobile device
Deletion of all data on devices by command from the server
(or one session if a phone has been lost, or all sessions if an employee has been dismissed)
Opening of files inside the eXpress application container; ban on external transfer and saving
Control of system features
(screenshotting, screen recording, saving in clipboard)
Absolute security of data transfer
Two layers of elliptic-curve end-to-end encryption
Secure push notifications without content transfer
TLS 1.3 and DTLS transport encryption
GOST encryption on demand
File and data access policies can be configured based on preset parameters
Integrations with information security systems
Need more details?
Get the eXpress presentation with a full description of its features and request a test version of the solution
Your advantages with Express
-
Enterprise-class security
-
A single window of SmartApps business applications
-
Federation Communication Protocol
Any other questions?
How is information security ensured at eXpress?
eXpress utilizes data encryption at rest and during transmission, various information security tools, multi-factor authentication mechanisms, and role-based access management features. The platform enables secure communication on personal mobile devices using an encrypted container. Full corporate control is ensured with on-premises installation (on the company's own servers).
How is mobile security implemented in eXpress?
User authentication occurs through three independent channels. eXpress implements end-to-end encryption, ensuring that only the sender and recipient can read messages. All work data on the mobile device is stored in an encrypted container. Control over system functions such as screenshots and screen recording is also implemented.
Is there support for GOST encryption?
Yes, there is support for GOST encryption (upon request).
What integrations are available on the platform?
Full synchronization with the customer's directory service (in most cases, Active Directory) is ensured. Corporate profile attributes can be customized, and integration with information security systems is possible, allowing for control over data transfer channels and monitoring of all content exchanged by users. Integration with SIEM systems and antivirus software is also implemented, allowing for streaming scanning of all files received by eXpress.
Does eXpress have FSTEC certification?
Yes, the eXpress communications system is certified by the FSTEC of Russia at Trust Level 4 (Certificate No. 4997 dated November 25, 2025).
What does the FSTEC Level 4 certificate provide?
FSTEC Russia's Level 4 Trust Certificate allows eXpress to be used in critical information infrastructure facilities, first-class security government information systems, and personal data information systems.
