Security Policy

How doxo Protects Your Security

doxo utilizes security technologies and methods to protect your data and your privacy. Critical data and documents are always encrypted and stored securely. doxo systems are built by a team with deep experience developing secure, highly reliable transaction processing systems – systems that have processed billions of online and mobile transactions.

doxo is designed to increase the security and privacy of your data.

Mail, notes, files, bills and critical paper documents often contain sensitive and personal information. Unfortunately, paper documents often are stolen or become compromised. According to Javelin Research, 90 percent of consumer data theft and compromise occurs via OFFLINE channels and not via the internet.

doxo continuously monitors all accounts, takes action as needed to protect our systems and data, and notifies you if we identify security issues related to your account. Security protections for your data and documents include:

    • doxo utilizes industry proven encryption for all sensitive data.
    • doxo systems are operated in a distributed data center with security monitoring and protection 24 hours a day, 7 days a week.
    • You register anonymously. doxo does not require your name or any personally identifiable information.
    • Your login credentials are always encrypted.
    • You are automatically logged out of your account after a period of inactivity.
    • doxo provides alerts and notifications to increase your security.
    • You are notified of key account activity like the receipt of documents.

Connecting on doxo protects your security and privacy

When your providers are on doxo, you can connect with them and go paper-free, so that they send electronic documents to you directly on doxo. Connections on doxo are one of the key methods that protect your security.

    • You always decide when and if to connect with a provider.
    • No provider can connect with you on doxo at any time unless you approve.
    • Each time you choose to connect with a provider, you identify and verify yourself to the provider with your own account credentials and information. Providers independently confirm your credentials and identity before a connection is established.
    • No provider can ever send information to you on doxo unless you have connected with them. You can disconnect from a provider at any time.
    • You always receive notification when a connection is established (once approved by a provider) or terminated.
    • Once connected, information or documents that your providers send is always encrypted and delivered through secure doxo systems.
    • doxo always validates the source of documents received and confirms that they have a connection to you on doxo before they are delivered into your doxo account.
    • Once connected, providers can only use doxo to send you information. Providers can never access or retrieve information from you or your account unless you initiate the action.

How you can protect your doxo account

The leading cause of online security failure is when personal access credentials are compromised. The following guidelines are your best means to protect your doxo account:

    • Don’t ever share your doxo username or password with anyone.
    • Make sure that your password is hard to guess. doxo strongly recommends that you use a password that is complex, with both numbers and capital letters.
    • Any time you suspect your doxo credentials may have been compromised, you should immediately change your password.
    • You should never provide any account information or access credentials in an email. doxo will never request that you send us any critical account information in an email.
    • When you are accessing your doxo account (or any other site where sensitive information is shared), make sure you have a secure internet connection. The web address or URL for a secure site, which uses encryption to protect transmitted data, will always begin with “https:” instead of just
    • Carefully monitor your account and review the notifications you receive from doxo regarding your account. These are your best means to identify any unusual activity.
    • Always log off when you are finished using your doxo account (as an additional protection, doxo systems will automatically log you out after a period of inactivity.)
    • Be certain that you have anti-virus protection, anti-spyware programs, and a personal firewall on any computer you use to access doxo.
    • Don’t install programs from people or companies you don’t know.
    • For any documents you upload into doxo, you should always shred any physical copies before recycling them. You can always print them later from your doxo account if you need a paper copy.

Keep in mind that the vast majority of fraud and information theft is conducted through low-tech methods such as mail theft, or someone rifling through your trash. By creating an account and storing your information in doxo, and by carefully monitoring your account activity, you greatly reduce your risks. Learn about doxo fraud prevention and how we protect users’ payments from scams.

Security with doxo

Frequently Asked Questions

With doxo, creating an account, storing your information, and carefully monitoring your activity can significantly reduce potential risks. Learn about doxo fraud prevention and how doxo protects user payments from scams.

  • No, doxo protects your payments.

    Creating a doxo account requires only a password that you create, a validated email address, and your zip code.

    No personally identifiable information is required, keeping you safe.

  • You have complete control and discretion at all times for what information you keep in your doxo account. All the data and documents you keep in your doxo account are stored securely in a separate database from your account credentials using both hardware and software encryption techniques.

    The database servers automatically back up your data to protect from fire or other physical catastrophe.

    doxo servers and systems are operated in facilities that are physically secure.

  • You always retain full ownership of the data you choose to keep in doxo. doxo has no ownership rights for any data or documents you enter or receive in the system.

    The doxo user terms protect your ownership rights to all the information you keep in your doxo account.

  • You can download or print any document that you keep in doxo at any time.

  • Any time you believe your credentials may have been compromised, you should immediately change your password on your doxo account.

    To do this, log into your account and change the password under the Account Settings link near the top of the page.

    To notify doxo of any security breach or issue with your account, please send an email with a clear description of the incident and the specific security concerns to security@doxo.com.

    A doxo employee will follow up with you promptly to discuss the incident and take any necessary actions to protect your account.

  • You can close your doxo account at any time by doing the following:

    • login to your doxo account
    • select “my settings”
    • click “cancel my doxo account,” enter the answer to your secret question and click “continue.”
    • your doxo account will then be closed.

    When you close your doxo account the information you’ve stored in your account is no longer accessible to you and is deleted from doxo databases. It’s very important that you download, print, or copy any key information before you cancel your account.

Rethink Bill Pay

Protect your identity not just your payments.