Seals

Who Sees It

Seals is offered to a member whose role may manage customers, and only where the organisation’s plan includes sealing.

Both conditions must hold. Sealing comes with the plan, which is shown under Plan and Billing. Without it, the entry is not in the menu.

The page works through the desktop companion application, connected under Settings, in TCC Connection. The connection is per browser. Where it is missing, the page says Sealing from this portal goes through the desktop application on your computer. This browser is not connected to it yet. It links to Install the desktop application, and to Connect it in Settings for a role that may open Settings.

Where It Is

Under Verification in the menu, beside Verify.

What a Seal Is

A seal turns a piece of text into a verification link. Whoever receives the link opens it and sees that the content came from your organisation.

It is not a legal electronic signature. It is an identity seal, and what it proves is authenticity: this text, from this organisation.

The reason to use it is business email compromise. Payment instructions, changed bank details, invoices and policy notices are the messages an attacker forges, and a recipient who can check the link does not have to judge the email itself.

Sealing Something

The page is one form.

Content to seal takes the text. Paste the message, the payment instruction or the passage you want to stand behind.

Label is optional, for example an invoice number. It is encrypted with the text, so whoever holds the link sees it too.

Seal content produces the result.

What You Get Back

A verification link, with a control to copy it and a control to open it. Below it, Valid until with the date the link stops verifying.

The seal covers the text exactly as you pasted it. Editing the message afterwards and sending the same link would leave the recipient checking a different text than the one they were sent.

How to Send It

Put the link beside the content, in the same message. The recipient opens the link, sees the content and sees who sealed it, and compares that with what they received.

We do not email the link. Our server cannot read the seal, so it cannot send it. Copy the link and send it yourself.

A link on its own proves nothing useful, and content on its own is what the attacker already has. The pair is the point.

To check a person rather than a message, use Verify.

To register a supplier or another partner that seals invoices and other files it sends you, see Business Partners.