The Global Standard for Secure & Certified Electronic Communications

SECURITY | COMPLIANCE | PRODUCTIVITYWWW.RPOST.COM

RPOST

RPOST PRODUCT UPDATE FOR CUSTOMER | December 2017

1

INTRODUCTION TO RPOST PRODUCT UPDATE .............................................................................................................. 2

RPost Service Portfolio .............................................................................................................................................. 2

RMail Adds Essential Features to Existing Email Programs ....................................................................................... 3

RMail Makes Email Better for Business ..................................................................................................................... 4

PRODUCT SNAPSHOTS ................................................................................................................................................... 6

RMail: Email Encryption & More ............................................................................................................................... 6

RSign: E-signature Services & Automation .............................................................................................................. 10

RForms: E-Sign for Your Forms Creation Applications ............................................................................................. 13

RShare: Secure File Share & More ........................................................................................................................... 15

Registered Email: Secure & Certified E-Delivery Proof ............................................................................................ 18

OTP Messaging: Quantum Secure Messaging App .................................................................................................. 21

2

INTRODUCTION TO RPOST PRODUCT UPDATE

RPost Service Portfolio

RPost is a leader in secure and certified electronic communications, using by thousands of companies worldwide to

enhance business security, compliance, and productivity.

Most users start with RPost’s RMail product, as it is an easy to install entry product within the RPost service

portfolio. Once users get started with RMail, savvy users consider specialized automation opportunities and more

productivity tools with RPost’s RSign®, RForms™, RShare™ and Registered Email™ services. Users migrate certain

types of notices, forms, communications, platforms, or users to these to further modernize their message and

document processes.

Each of these adds an element of specialization to the functions enabled through the RMail user provisioning

(RForms, RShare, Registered Email) or RSign user provisioning. All users provisioned for RMail do not need to be re-

provisioned for RForms, RShare, Registered Email automation, but may opt to use these from different interfaces

or by changing message or template formatting to automate sending from their existing business applications.

RSign users need to be provisioned separately for that service if they choose to use the service more than 5 times

per user per month.

3

RMail Adds Essential Features to Existing Email Programs

RMail adds advanced features all-in-one. Each of these features is rated among the best in the world standalone,

by analysts and industry organizations; with customers further benefiting from a more elegant user experience,

and a more economical approach, with all of these features included in one app, the RMail app. Further, each

feature has a variety of settings and configuration options to suit any small business or enterprise requirement,

commercially off-the-shelf. Main features include:

4

RMail Makes Email Better for Business

RMail empowers users inside their existing email program with more productivity with security and compliance in

mind. RMail provides essentials that make email better for business.

RMail Makes Microsoft Better – Empower Office 365 and Outlook

RMail Makes Gmail Better – Empower Gmail and Google Apps RMail features run inside Gmail installed as a Chrome browser extension.

5

RMail Makes Zimbra Better for Business RMail features run inside Zimbra installed with a Zimlet that can be deployed for one company or by a Zimbra

hosting company for some or all users.

RMail Extends to Include RSign RMail users that would like to explore advanced e-signature automation options with rules, templates, and the

ability to set a simple guided signoff process (and much more!) may themselves click the “Advanced” link next to

the e-sign options. This auto-enrolls the user into the RSign advance web-based e-sign platform. The users may

simply start using the service up to five times per user per month.

6

PRODUCT SNAPSHOTS

RMail: Email Encryption & More

RMail® makes Microsoft better for business, adding specialized security for privacy, compliance, and to

prevent targeted threats, certified e-delivery tracking and proof, secure large file sharing, and legal e-

signatures, all-in-one. RMail installs to run inside Microsoft Office 365 and all versions of Outlook.

• Specialized security -- RMail encryption automatically delivers email in a unique way to each recipient,

always creating the simplest user experience for the recipient while also returning auditable proof of

privacy compliance to the sender; going far beyond basic TLS and without the inefficiencies of portal

link-retrieval systems.

o Built in imposter protection -- RMail includes unique new technology to detect targeted spear-

phishing, specifically designed to prevent imposter email wire fraud and other lures.

• Certified e-delivery tracking and proof -- RMail includes Registered Email™ advanced open and delivery

tracking, returning court-admissible timestamped proof of precise message content successfully

delivered – importantly, without requiring any action or setting by the recipient.

• Secure large file sharing -- With RMail, it is simple to attach up to 1Gb of files to an Outlook email and

send securely. RMail file sharing is perfect for security and compliance as it creates a one-time

download box that eliminates the risk of inviting download recipients to be able to see the sender’s

cloud storage file structure, reduces risk by auto-purging files after a preset time, includes automatic

encryption options, and returns proof of delivery and download.

• Electronic signatures -- RMail encourages e-signature use as it includes the easiest e-signature process

available. Senders simply attach any document in Outlook and one-click send for recipient e-signoff.

With RMail e-signatures, there is no need for the sender to set up or pre-configure the document.

RMail e-signature users also receive one-click access to RSign, RPost’s full-service advanced e-signature

platform.

RMail® has been enhancing customer security, compliance and productivity for more than a decade, powered by

RPost® patented Registered Email™ technology. RMail runs seamlessly within users’ existing email platforms,

including all versions of Microsoft Outlook, Office 365, Outlook on the Web, Gmail, Zimbra and more, with the

RMail Security Gateway as an optional add-on module.

7

RMail per user service plans are easy to install with a few clicks, without any adjustments to the server or network.

RMail volume service plans simplify automated sending from business applications or from groups of power users.

With RMail, you always send from your existing email address to any email recipient with no software, accounts, or

downloads required on the recipient end.

All EU Member Countries and the United Kingdom must comply with the General Data Protection

Regulation (GDPR) requiring business to protect the privacy and security of personal data under threat of large

fines. With RMail, users receive a Registered Receipt record of each transaction that may serve as auditable proof

of GDPR compliance and secure email delivery.

In the United States, there are a variety of consumer data privacy regulations in health care and consumer finance

related industries (HIPAA, GLBA, etc.). With RMail, users receive a Registered Receipt record of each transaction

that may serve as auditable proof of compliance and secure email delivery.

QUICK GUIDE TO BENEFITS RMail is a security, compliance, and productivity bundle that runs “Inside” Microsoft Outlook, Gmail, Zimbra and

other platforms, and adds value for important messages.

RMail All-in-One Features:

• Encryption Compliance

• Certified E-Delivery Proof

• Email Open Tracking

• E-Signatures

• Secure File Share

• Imposter Email Detection, and more, all-in-one.

RMail Empowers Users:

• Creates Visibility: desire to track opening, delivery

• Empowers: irrefutable proof of who said what when

• Secures: encryption to protect against thieves

• Boosts Productivity: e-sign, large file transfer inside

RMail Desirable Key Attributes:

• Simple enough for individuals

• Secure enough for the largest companies

• Universal – no recipient requirements

• No storage in transit by third parties

• All-in-One integrated offering simplifies

8

SERVICE PLAN DETAILS

Standard Plan Features

• Encrypt: Easily encrypt sensitive emails and attachments for security or regulatory compliance. Includes a

one-click encrypted reply option for recipients. Automatically detects and delivers with the simplest user

experience for each recipient and provides a toggle option to maintain encryption inside each recipient’s

inbox. Provides auditable proof of data privacy compliance on a message-by-message basis.

• Track & Prove: Track, prove and certify your important emails by sending them as Registered Email™

messages. Includes timestamped proof of delivery with proof of message body and attachment content.

Know precisely when your email has been delivered with open tracking.

• E-Sign: Accelerate legally-binding signoff on documents and agreements with simple-to-use electronic

signature features. Attach any document and send for recipient e-signoff, with no need to configure the

document online. (See RSign for advanced online e-signature and automation services).

• Secure Large File Transfer: Simply attach large files and send from your email compose pane. With RMail,

you may attach and send large files up to hundreds of megabytes per transmission, with options to

encrypt. There is no need to visit online portals to create and share folders; there is no need to invite

others to have access to your main file repositories. RMail automatically creates a one-time online folder

per send for each recipient to retrieve files, and auto-purges the data after a selectable period of time to

optimize security and compliance.

• Imposter Email Protection: Detects and alerts for the most sophisticated spear-phishing lures; alerting

users when they are about to reply to a Business Email Compromise (BEC) imposter email. Users are

protected with RMail’s “Anti-Whaling” technology.

• SideNote: Insert private notes into an email visible only to Cc’d/Bcc’d recipients, to provide copied

recipients with private context as to why they have been copied on the original message.

• Auditable Tracking and Verifiable Proof: A Registered Receipt™ email record is automatically generated

and returned to the sender with every RMail message sent, to provide the sender verifiable and auditable

proof of who said what when, who agreed to what when, or fact of data privacy compliance.

Business Plan Features

Includes all Standard Plan features optimized for power users, plus includes an online management console.

• Power Users: Optimized for higher volume senders.

• Reporting Online: View service use volume by user, by feature, by date range, by delivery status or by message element.

• Custom Report Delivery: Create custom use reports and schedule automated encrypted delivery in a variety of formats.

• Productivity Enhancements: Adjust advanced settings such as e-sign order for signoff (i.e. sequential signing where one person has to complete the signing process before the next person is invited to signoff), form field e-sign tags, larger file transfer limits (up to 1 GB per transmission) or length of time large file transfer data remains available for recipients, and more.

9

Shared Volume Plan Features

• High Volume Senders: These plans are for organizations that have high-volume senders, automated sending from business applications, or shared workflow sending addresses.

• Shared Service License: These plans include all Business Plan features with a shared service license for up to the designated number of users, sending up to the designated aggregate RMail message volume (total across all users), over the designated period of time (monthly, annual, or as used). These plans automatically replenish at the end of the period or if volume has been completed, upon re-order or upgrade.

Add-On: Security Gateway & Customization

• Security Gateway Features: The RMail Security Gateway adds policy-based email encryption and much more, as an add-on for designated RMail Business Per User Plans and RMail Shared Volume Plans. The RMail Security Gateway is installed as an add-on to the customer messaging server environment such that inbound and/or outbound message traffic passes through. This adds a native content policy engine to provide data loss prevention (DLP) content inspection and automated routing of content identified messages for encrypted delivery, for Registered Email certified e-delivery proof, or for recipient e-signoff. Automated encryption enforcement may be triggered based on sender, recipient, tags by user (e.g., adding "Secure" or "(R)" to the subject line), data classification tags, content inspection of messages or attachments, and combinations. The RMail Security Gateway also provides market leading messaging security including anti-spam, anti-virus, anti-spyware, anti-ransomware and other threat prevention scanning on in-and-outbound email traffic.

• Customization: Organizations that choose to have more control over the user experience may do so with an added advanced installation configuration file that permits the installer to customize defaults, user interface layout, and more than 30 other specialized user experience options.

10

RSign: E-signature Services & Automation

RSign® is the simplest to use, most affordable, full featured worldwide web-based electronic signature service.

RSign makes it easy for signers to complete and sign your documents using any desktop or mobile web browser, in

an intuitive, guided signing process. RSign, by RPost, includes optional encryption for privacy and patented

auditable proof technology. RPost has been enhancing customer security, compliance and productivity for more

than a decade.

QUICK GUIDE TO BENEFITS RSign – The easiest-to-use affordable service to automate sending and receiving filled and e-signed documents

and forms.

• Prepare and send a form or document to be filled and signed electronically, always maintaining access, security, and control.

• Lead each signer automatically through the form or document, one input field at a time, using RSign’s guided e-signing process.

• Configure a document and its associated workflow just once and save as a template, and you’ll never have to do it again for similar transactions.

• View which documents have been opened and signed, increasing visibility, measuring signoff time, and speeding your business process.

• Receive an error-free, completed form or document back from your signer – it has never been easier!

Customizable Experience with Security

Configurable features allow you to create your perfect sender and signer experience with document access

permissions and controls, signing order, signer options, form field dependencies, re-usable templates and rule sets,

group and user roles, document management, automatic reminders, reporting, security, web page signing links,

encryption for compliance and privacy, ESIGN law electronic consent confirmation, and much more.

Templates

No matter the complexity of your document or form, RSign makes it easy to repeat similar transactions. Configure

a document and its associated workflow or create form field rule sets just once as a template for one-time

document preparation or for reuse with dynamic customer-filled forms. You can even share templates with other

users in your group or team.

Prepare

Preparing your document is easy. Simply drag and drop input fields and field rules with your mouse on a web-

based form editor. The prepared field rules are saved onto a copy of your uploaded document, as a rule set to

apply to partially filled forms in the future, or as a template to share for reuse among your team. The saved rule

11

sets and templates make it easy to reuse the same document or form or simply send a one-off document for

signature.

Sign

Getting an agreement signed is just as easy. Upload your document or choose a pre-configured template, choose

your recipients, drag and drop the fields you need filled and signed, and press “Send.” That’s it! Signers receive an

email with a link to view and sign the document (optionally, after they agree to your optional custom terms of

service). RSign’s guided signing process leads them through the entire document with a convenient progress

checklist. Upon completion, a signed and authenticated copy of the document is sent to all parties, with a

verifiable audit trail attached to the transaction record. Getting an error-free, completed document back from your

signers has never been easier or faster.

Automation and APIs

Without any programming background, you can advance your team’s process automation by creating a static

signoff link for a pre-configured document or form template, and add the link to a web page, button, bulk/batch

email template, mail merge email workflow, or a saved team email. Anyone with this link can easily fill the form

and electronically signoff according to the security levels or other rules you set. Administrators may choose to

extend business applications programmatically using RSign APIs for sending documents for signature and/or

managing the signed agreements.

Legal Proof®

RSign provides extra protection for the sender with a Registered Receipt™ verifiable audit trail of the e-sign

transaction that contains certified proof of delivery, timestamp of delivery and signoff, and proof of exact content.

If needed, you have certified forensic evidence to prove your transaction happened exactly as it did, when notice

was delivered, and when signed by each party.

Online Management Console with Advanced Reporting

RSign makes available a well laid-out online management console to adjust advanced settings, user permissions, or

create and schedule custom use reports.

Looking for Proof of E-Delivery of Contract Notices?

To send contract notices as Registered Email™ messages with verifiable proof of e-delivery, message and

attachment content, and official timestamp, explore the RMail product.

Looking to Send for E-signoff from within Microsoft Outlook, Gmail, or Zimbra?

For simple ways to send for e-signoff from within Microsoft Outlook, Gmail, or Zimbra, explore the RMail product.

12

SERVICE PLAN DETAILS

Standard Plan Features

• Attach documents and forms and send for e-signoff

• Require a private access code to view and sign

• Create automated and scheduled reminders & notifications, with rules

• Attach files for signoff directly from your local drive, Google Drive, Dropbox, or Microsoft OneDrive

• Receive real-time delivery and signoff audit trail and history

Business Plan Features

Includes all features in the Standard plan, as well as encryption, templates, advanced form features, and online

management console, including the following:

• Create, share & reuse templates

• Secure data privacy with encryption

• Create advanced rules for forms and save as templates

• Reuse rule sets

• Add field dependencies and conditional fields

• Store signed documents in system

• Receive advanced user and signoff reports on demand

• Set advanced roles & permissions

• Authenticate signer

• Permit recipients to add attachments as part of the signoff record

• Capture signoff with a finger/mouse drawn signature or typewritten signature

• Encrypt with auditable proof of data privacy compliance

• Require affirmation of custom terms or ESIGN consent language for legal compliance

Shared Volume Plan Features

• High Volume Senders: These plans are for organizations that have high-volume senders, automated sending from business applications, or shared workflow sending addresses.

• Shared Service License: These plans include all Business Plan features with a shared service license for up to the designated number of users, sending up to the designated aggregate RSign message volume (total across all users), over the designated period of time (monthly, annual, or as used). These plans automatically replenish at the end of the period or if volume has been completed, upon re-order or upgrade.

Add-On: Advanced Automation with API Option

Plans with this add-on are for organizations that strive to automate more. These plans include options to set up

static signoff links to add pre-configured forms to buttons, websites, bulk/batch emails templates or mail merge

email workflow. The administrator may also choose to create custom e-sign consent language or terms required

for acceptance prior to document signing, create a custom post-signing landing page, or add a Registered Receipt™

forensic transaction record.

All product features are made accessible to the administrator to automate more, through connectors and APIs.

RSign APIs are available to your technical team to extend your CRM, ERP, CLM or document management systems

with advanced or customized RSign functionality.

This is a shared service license for up to 500 users sending up to 10,000 RSign transactions in aggregate per month, replenishing monthly. The customer may upgrade this plan to an annual volume plan which can be replenished as used at any time.

13

RForms: E-Sign for Your Forms Creation Applications

RForms™ is the simplest way to turn any forms creation, data import, and mail merge platform into an e-sign

process. RForms makes controlling the e-signoff from any PDF or DOC form seamless – with no API or

integrations needed!

RForms makes it easy for signers to complete and sign your forms and documents using any desktop or mobile

web browser, converting the form into an e-sign enabled form automatically; placing e-signatures into designated

locations on the form.

QUICK GUIDE TO BENEFITS RForms – The easiest-to-use affordable service to automate converting documents and forms into e-sign

enabled forms; perfect for those that generate forms with business data merge applications.

• With no API or online form preparation needed, send a form or document to be filled and signed electronically, always maintaining access, security, and control.

• Each signature and text field is automatically placed in the proper location on the form.

• View which documents have been opened and signed, increasing visibility, measuring signoff time, and speeding your business process.

• Receive an error-free, completed form or document back from your signer – it has never been easier!

• Maintain court-admissible proof of who signed what when, with the Registered Receipt™ audit trail and forensic record.

• Customize the experience with security, encryption, and legal timestamped proof of e-delivery.

SERVICE PLAN DETAILS RForms services enabled with certain RMail business and shared volume plans. These are generally plans for:

High Volume Senders: For organizations that have high-volume senders, automated sending from business applications, or shared workflow sending addresses.

Shared Service License: For up to a designated number of users, sending up to the designated aggregate RForms message volume (total across all users), over the designated period of time. These plans automatically replenish at the end of the period or if volume has been completed, upon re-order or upgrade.

Users create templates simply using existing WORD DOC or PDF forms by adding signing controls by simply making

a few text adjustments to their forms and changing some advanced settings in the service administration portal.

For example:

a. In the customer administration panel, in the e-sign options, the administrator selects “annotations off”.

b. Any user can thereafter simply add field tags to the document template that will be sent for signoff, to

create a controlled signoff process.

14

c. Recipients simply add their signature in a browser pop-up after they receive the document, and the

signature is placed in the proper location on the document completing the e-sign process..

The RForms service allows the sender to send their document with the option of “Sign Only” where the signer(s)

can view and complete the signing process without annotating the contract. The sender can have the signer’s

information like: Name, Date, Title (optional) and Signature printed at the required location within the contract

using the form field tags.

Template form field tags should be used in the following format in a Microsoft Office or PDF document:

Field Tags

Name <<Namex>>

Date <<Datex>>

Title <<Titlex>>

Signature <<Signaturex>>

Where “x” is the signer’s order of signing. Example: In case of two signers, the tags used within the document

would be: <<Signature1>> and <<Signature2>>, and signer who signs first would have their signature printed on

the location of <<Signature1>>.

Form field tags may be used with:

• Single or Multiple signers

• Parallel or Sequential signing process

• Document locked or unlocked (annotation on/off)

Example: enter the required tags on the document for the signer:

15

RShare: Secure File Share & More

RShare™ file sharing is also the easiest to use secure file sharing service for businesses that need to transfer files

of any size to anyone, on demand. With RShare, you simply attach files to email, select reminder and security

options, and send, regardless of file size. With RShare, it is simple to attach up to 1Gb of files to an Outlook email

and send, or send from a web browser interface. RShare file sharing is better for security and compliance as it

creates a one-time download data room, auto-purges files after a set time period, includes automatic encryption

options, returns proof of delivery and download, and eliminates the risk of inviting download recipients to be able

to see the sender’s cloud storage file structure.

RShare™ email is the easiest to send secure messages and extra-large files from a group or shared sender email

address with encryption and proof of delivery.

RShare is included in the RMail services. RMail® has been enhancing customer security, compliance and

productivity for more than a decade, powered by RPost® patented Registered Email™ technology.

QUICK GUIDE TO BENEFITS RShare™ email makes it easy for a group of users to send secure messages and files from one “group” or

“workflow” email address. As an example, certain departments may share workflow or generic email accounts (i.e.

billing@company.com). The RShare web interface makes it easy for a team of users to easily send from the same

workflow or generic address from any web browser. Users can opt to send the message with extra-large files or no

attachments at all, as Registered Email messages to track and prove delivery, encrypt, or set to receive recipient’s

e-signatures.

16

RShare file sharing includes important business security, compliance, and productivity features:

• Simple: Recipients do not need to have accounts on their end, and there is no need for recipients to log-

in.

• Retention Timeframes: Sender’s may set and adjust the storage duration from one day to ninety days

• Auto-Purge: Sender may set the timeframe when online data room will be purged, which ensures that

files are not left online at active links for extended periods of time, automating compliance with data

retention policies. This is an essential in highly regulated data privacy environments (Health care in the

United States market for HIPAA compliance, and generally those dealing in sensitive consumer financial or

health information in the United States (HIPAA & GLB privacy laws), in Europe (GDPR privacy regulations)

and Canada.

• Encryption: Sender may choose levels of encryption, with the system automatically adapting the

encrypted delivery method to ensure the simples recipient user experience, using 256-bit AES and SSL/TLS

encryption.

• Unique, Segregated Data Room: Each transmission creates a unique data room for temporary storage of

the files being transferred. This eliminates any possibility of the recipient having access to, or views of the

senders file directory structures, file directory names, and other metadata that could compromise the

sender data privacy or expose strategic business information.

• Access: Senders may enable two-factor authentication (2FA) and access controls.

17

• Admin Console, Reminders and Reports: Sender may set timeframes to send reminders to recipients to

retrieve files, and they may view activity reports, or create custom scheduled activity reports.

Administrators may manage user settings and reports in an online portal.

• Auditable Tracking and Verifiable Proof: A Registered Receipt™ email record is automatically

generated and returned to the sender with every transmission sent, to provide the sender verifiable

and auditable proof of delivery, download, and opening.

• Recipient Reply: Sender may permit the recipient to reply encrypted with added files.

• Kill Switch: Sender or sender organization may choose to kill the data room at any time, purging all

stored files.

• Office 365 integration: For users that prefer to use RShare elegantly running within Microsoft Outlook

or with advanced Registered Email e-delivery proof, email encryption, and e-signature services

included, choose RPost’s RMail product.

• API Access: Automation is available using APIs

18

Registered Email: Secure & Certified E-Delivery Proof

The Registered Email™ services have been used in more than 100 countries to certify and prove email delivery,

content and timestamp, without requiring any compliant action at the recipient. For each message sent, the

sender receives the Registered Receipt™ email record, which is a self-contained record of proof of delivery with

delivery timestamps, open tracking, proof of content delivered, and proof of encrypted delivery.

The Registered Receipt e-mail has the capability to authenticate and accurately reproduce the original e-mail and

attachments, including any attached disclosures, which satisfies the E-Sign Act’s retention and accurate

reproduction requirements. And the Registered Receipt e-mail, because it can be provided to third parties and

used to authenticate the content and attachments to the e-mail, may be retained by creditors to enable access to

parties entitled to access to the records for the period required by law, which satisfies the E-Sign Act’s access

requirements.

A Registered Email message may be sent encrypted, or configured to record a recipient reply, signoff, or consent.

QUICK GUIDE TO BENEFITS Registered Receipt is a durable, verifiable, and self-contained record of each email transmission. A sender views

this receipt in their email program, or clicks on the Registered Receipt HTML file to view the receipt in their

browser. This receipt includes an XML file, and the service includes a variety of reports, each with transmission

data that may be extracted and imported into the sender’s systems. This receipt’s HTML file may be used by any

party to authenticate the transmission data and re-construct the original email content – without the Registered

Email system storing a copy of the message or transmission data.

Automation and Volume Sending. All business applications (i.e. invoicing, collections, payslips, customer

notifications, etc.) may be easily configured to send automated messages as Registered Email messages by simply

adding a domain extension to each recipient email address domain. To convert the message en route into an

encrypted Registered Email message, or a message configured to record the recipient’s e-signature, one simply

adds a specific subject line codes to direct the Registered Email system to process that particular message in a

special manner.

Registered Receipt is an evidentiary record of high weight. There are many legal opinions in the US and Europe

attesting to this receipt as a legal and verifiable record of email content and timestamp delivered. Below are

experts from one legal opinion related to use of the Registered Receipt as proof of e-delivery in accordance

contract requirements, laws, and regulations.

Evidence. The Service provides each sender of an e-mail with confirmation of delivery of the e-mail and receipt by

the recipient’s e-mail server, as well as the ability to reproduce the content of the original e-mail message,

including any attachments. The RPost server obtains evidence of delivery and receipt of e-mail by recording

communications between it and the recipient’s e-mail server as each message is delivered. The Service is capable

of reproducing the content of the original email and attachments (including PDF files) through the use of

cryptography meeting industry standards, which methods employ hash algorithms and use of encryption and

encrypted hashes (digital signatures). This evidence of the delivery and receipt of an e-mail to the recipient’s e-

19

mail server, and the ability to reproduce the original e-mail content, is provided to each sender in the form of a

“Registered Receipt” e-mail.

Delivery and Receipt Status. After the Service’s attempt to deliver an e-mail, the Service provides the sender with

the Registered Receipt e-mail, which provides a report that contains the delivery status of the e-mail for each

recipient. This Registered Receipt will also contain two timestamps regarding the delivery and receipt of the e-

mail: (1) a Proof of Delivery (“POD”) timestamp, which is the time that the e-mail reached the RPost server after

the sender sent it through the Service; and (2) a Proof of Receipt (“POR”) timestamp, which is the time the

recipient received the e-mail. These timestamps in the Registered Receipt e-mail indicate the applicable date and

time in both Coordinated Universal Time (UTC) and local delivery times.

Transmission Data. In addition to the POD and POR timestamps, the Registered Receipt e-mail includes the

complete forensic transmission metadata for each recipient of an e-mail. This includes the underlying server-to-

server SMTP or ESMTP conversation, including the potential for HTTP and DSN/MUA records, for each recipient

destination of the e-mail.

Original Content of the E-mail. In addition, this Registered Receipt e-mail contains the data that can be used to

reproduce the sender’s original e-mail message as it was received by the RPost server. Use of the Registered

Receipt e-mail does not require that any data regarding the e-mail transaction be stored elsewhere. The entire e-

mail record and authentication elements (authentication is discussed directly below) are embedded within the

Registered Receipt e-mail.

Authenticated with a Digital Seal. To ensure that the data represents the original content of the e-mail and

transmission data, and that the data has not been tampered with, the data is encrypted and packaged with RPost’s

“Digital Seal” technology. This technology allows anyone to verify the authenticity of the e-mail content,

attachments, transmission metadata, POD and POR delivery record, and POD and POR timestamps that are

included in using the Registered Receipt e-mail.

Verify Original without Third Party Storage. The Registered Receipt e-mail can be saved to a user’s hard drive or

disk for later authentication or forwarded by e-mail to third parties, without corrupting its ability to be

authenticated in the future. Any party holding this Registered Receipt e-mail can forward it to the RPost system,

which will use cryptographic methods to determine if the data regarding the Registered Receipt e-mail record, as

well as the embedded original e-mail content and attachments (including the transmission metadata, and

sending/delivery (POD and POR) record and timestamps) has been altered. If the data in the Registered Receipt e-

mail is authenticated, then RPost automatically and immediately reconstructs an authenticated copy of the original

e-mail message as it was received by the RPost server, including the attachments, and all notifications and

transaction records, including authenticated POD and POR timestamps cryptographically associated with the

original message content, and transmission data relevant to the delivery of the email and its attachments

(including all relevant metadata).

SERVICE PLAN DETAILS Registered Email services are also enabled with RMail business and shared volume plans.

Shared Volume Plan Features

• High Volume Senders: These plans are for organizations that have high-volume senders, automated sending from business applications, or shared workflow sending addresses.

• Shared Service License: These plans include all Business Plan features with a shared service license for up to the designated number of users, sending up to the designated aggregate RMail message volume (total across all users), over the designated period of time (monthly, annual, or as used). These plans automatically replenish at the end of the period or if volume has been completed, upon re-order or upgrade.

20

Add-On: Security Gateway & Customization

• Security Gateway Features: The Security Gateway adds policy-based Registered Email and email encryption sending, and more, as an add-on for designated Business Per User Plans and Shared Volume Plans. The Security Gateway is installed as an add-on to the customer messaging server environment such that inbound and/or outbound message traffic passes through. This adds a native content policy engine to provide data loss prevention (DLP) content inspection and automated routing of content identified messages for encrypted delivery, for Registered Email certified e-delivery proof, or for recipient e-signoff. Automated encryption enforcement may be triggered based on sender, recipient, tags by user (e.g., adding "Secure" or "(R)" to the subject line), data classification tags, content inspection of messages or attachments, and combinations. The Security Gateway also includes market leading messaging security including anti-spam, anti-virus, anti-spyware, anti-ransomware and other threat prevention scanning on in-and-outbound email traffic.

• Customization: Organizations that choose to have more control over the user experience may do so with an added advanced installation configuration file that permits the installer to customize defaults, user interface layout, and more than 30 other specialized user experience options.

21

OTP Messaging: Quantum Secure Messaging App

OTP Messaging™ is the first quantum secure messaging app. OTP Messaging provides unbreakable message

encryption across a private network separate from email, using the One-Time Pad theory of encryption with each

unique encryption key pad generated from a quantum random number generator, for the ultimate in messaging

secrecy and anonymity.

One-Time Pad is the only method of encryption which has been mathematically proven to be unbreakable. The

OTP Messaging service implements this One-Time Pad theory of encryption in a user-friendly service that

operates as a private messaging network separate from email.

Each subscriber to the OTP Messaging service receives an OTP Messaging encryption key (OTP Key) that comes

in the form of a memory card. Users simply plug this OTP Key into a computing device, open the OTP Messaging

app, and start sending/receiving quantum secure messages.

This OTP Key includes each user’s unique messaging address and a self-contained messaging application used to

compose, send, receive, and store secure messages. It also contains a unique data pad of random numbers,

created by a quantum random number generator, which is the user’s One-Time Pad used to encrypt and decrypt

the user’s messages. All messages are indistinguishable from random data.

Use the OTP Messaging service to communicate to anyone else who has an OTP Key. Your messages can be any

size and addressed to as many people as you wish. You may attach files of any size or type; all will be

unbreakably encrypted. Your communications are anonymous and untraceable.

RPost®, the provider of patented OTP Messaging for Ingram Micro, has been enhancing customer security,

compliance and productivity for more than a decade.

QUICK GUIDE TO BENEFITS OTP Messaging provides unbreakable quantum secure messaging across a private network separate from email.

The OTP Messaging service permits you to communicate to anyone else who has an OTP Key. Your messages can

be any size and addressed to as many people as you wish. You may attach files of any size or type; all will be

unbreakably encrypted. Your communications are anonymous and untraceable.

OTP Messaging Features Include:

• One-Time Pad Encrypted Delivery: messages are converted to random data at the sender, based on the

one-time pad encryption method, and transmitted as unique sets of random data to each recipient.

• Eyes Only: The recipient may only view message parts as they are reading it.

• Read Once: The message self-destructs after it is read once and closed.

• Shred: No plaintext messages are stored on your device or OTP key. Once data is used, all data is multiply

overwritten and nulled to make it unrecoverable.

• Anonymity: There is no metadata to identify you or the recipients of your message, or associate any

identity with the OTP Key or transmission. There is no data stored in the OTP Messaging system to identify

a sender or recipient.

• Encrypted File Transfer: Transfer files and attachments with unbreakable encryption.

22

• Read Receipt: The sender may opt to permit the recipient to return a notice that the recipient has read

the sender’s message.

SERVICE PLAN DETAILS With the OTP Messaging service, you are purchasing an OTP Key that has a service plan based on how much

quantum secure data you wish to send and receive.

To send and receive OTP Messaging quantum secure messages, you need an OTP Key. Each OTP Key includes the

OTP Messaging user interface to send, receive, store and manage your communications and account, with all data

and components self-contained on the OTP Key.

The OTP Key accesses the OTP Messaging quantum secure messaging network. There is nothing else you need to

send quantum secure messages other than recipients who also have OTP Keys.

Can I use my OTP Key with any computer or mobile device? OTP Keys are available on SD cards, Micro-SD cards,

or Mini-USBs. You will need to use these in a computing device that has an SD card slot or can accommodate a

USB. There are user interfaces designed for Windows and Mac operating systems. For a list of other systems or

mobile devices that you may use.

How many messages can I send with my OTP Key? The OTP Key includes a set of random data that is used for

each message sent and received, for encryption and decryption. The random data depletes with each transmission

as it may only be used “one time” per the One-Time Pad theory of encryption. You may purchase OTP Keys that

have different data allocations. The amount of messages you can send and receive per gigabyte of quantum

random data stored on your key depends on the size of your messages and whether you include attached files, and

the size of these files. Considering industry standards, you may consider each gigabyte of data to permit between

10,000 and 50,000 messages sent and received, with the range depending on whether you send most messages

with attachments, or most messages with only message text.

What happens when I use all of my data? With each message sent or received, after encryption or decryption, the

data used to encrypt or decrypt will be destroyed, following the One-Time Pad theory of encryption. As such, your

OTP Key will deplete over time. When your OTP data runs out, you should purchase a new OTP Key with a new OTP

Messaging ID, and destroy your previous OTP Key.

How will I receive my OTP Key? Consistent with the One-Time Pad theory of encryption, the OTP Keys cannot be

emailed or downloaded --- as such methods of delivery would create additional copies of your OTP Key

(invalidating the One-Time Pad theory of encryption). OTP Keys will be mailed using a traditional mail courier

service. You should expect delivery to take up to four weeks for preparation and shipping.

The Global Standard for Secure & Certified Electronic Communications

E-delivery Proof. Encryption. E-signatures.

The RPost products and Registered Email technology have been used in more than 100 countries worldwide by governments and businesses of all sizes.

Product and Technology Information: www.rpost.com