Enterprise Collaboration

The CommandHub® solution is an exceedingly secure, compartmented solution for sensitive information with applicability from simple document sharing between groups of users to collaborative interactions that require adherence to business processes.

With innovative workflows that significantly reduce effort, plus logical security controls that only allow permitted activity, CommandHub is the ideal solution for protecting the most sensitive corporate, government or personal information. The functionality includes selective access, extensive business process controls, comprehensive reporting, simple administrative tools, and a full audit trail.

The underlying technology was built from the ground up based on military security principles. Access to each discrete, private workspace is fully controlled and can be as open, or restricted, as business requirements dictate. The architecture facilitates adaptation to a diversity of business requirements with the ability to restrict the functionality to those elements applicable to particular requirement – such as special projects, risk management, board/committee papers, due diligence or electronic courtrooms.

Boards and Committees

BoardHub™ provides a highly secure environment in which board and committee papers can be shared, managed and archived.

BoardHub includes a comprehensive set of features that allows users to create an Agenda document that can include attached documents for any item within the Agenda, providing the electronic equivalent of an agenda summary combined with a set of papers relating to that document that would previously have been bound and delivered by courier. Each document in the Agenda can be opened and viewed individually or the entire Agenda and associated documents can be downloaded with a single click. This allows users to view and action an agenda offline while retaining all online benefits.

Consent documents are offered within BoardHub to facilitate the review and approval of items such as circular resolutions. One or more documents can be added to a consent with one or more users required to review and approve a document prior to it's inclusion within an agenda. Selected users are provided access to a list of all consent items along with the location and status of each item.

Courtrooms

JuryHub™ is a full function electronic courtroom solution that extends the CommandHub security to all areas of the courtroom. This functionality includes preparation of evidence and other material for "real-time" display and annotations on secure mobile devices for all trial participants.

JuryHub provides complete control of the trial process and deployments have shown a number of key benefits, including a substantial reduction in the duration of complex cases.

Due Diligence

DealHub™ provides comprehensive due diligence functionality that enhances the Virtual Data Room capability for Mergers & Acquisitions, asset sales and other high value deals.

Particularly applicable for complex deals, yet simple enough to use for a single party transaction, DealHub has been used for a diversity of multi-billion-dollar deals throughout the world.

The fully integrated Question & Answer management tools ensure that the due diligence activity runs smoothly, speedily and, most importantly, securely. Loading many thousands of documents and extracting the relevant information at the conclusion of a deal is painless with simple drag-and-drop functionality.

User Control

Whereas CommandHub provides a compartmented collaborative solution, HubDrop® is an exceedingly secure non-compartmented person-to-person file sharing solution. With security that is transparent to the user, HubDrop provides a highly effective means of exchanging files between users.

Subject to the overall configuration settings - selected by the enterprise - each user has full control over which files are to be shared, and with whom they are shared. Using a simple drag-n-drop upload, the storage of files within HubDrop provides a secure backup protection from ransomware and file version accidents.

Each user can create and edit their own folder structure and the user onboarding process is compatible with enterprise user management and single-sign-on facilities.

Mobile Functionality

In today's mobile age corporations and governments require that important documents be fully accessible when users are away from their primary computer. The adoption of tablets and smartphones within business processes introduced new concerns and requirements, not only to provide functionality and ensure compliance but also to prevent accidental, or deliberate, data leakage.

HubVault™ provides a direct app interface to both the CommandHub and HubDrop solutions and is available for Apple iOS and OSX, Android and Windows-based devices (including desktops and laptops).

The viewing, as well as updating, of documents is controlled so that files and folders are synced with the device only if the user has been explicitly granted access. Business process rules, including permitted actions and appropriate restrictions as to how, and to whom, documents can be forwarded, ensure process compliance. The option to handle PDF annotation in-memory avoids the caching vulnerabilities that normally exist while documents are being viewed or edited, so that even if a device is stolen, the data will remain protected from attack.

Separation of Business and Personal Data

The HubVault solution provides enterprise-controlled separation of business and personal material to easily implement an effective BYOD policy.

A user-controlled compartment is provided into which the user can secure material from other sources, as well as directly saving sensitive content created on the mobile device. This private compartment remains invisible to other users and includes the ability to arrange documents within a flexible folder structure, to directly import notes and photos, and automatically sync those folders across multiple personal devices.

Stringent Security

While there are many so-called 'security' solutions there are very few that were designed with security in mind from the outset and even fewer that were designed around compartmentation (data access on a need to know basis), process assurance (preventing accidental and deliberate data leakage) and making such sophisticated security transparent to the user.

The CommandHub technology uses a number of innovative approaches to provide in transit, at rest and in use protection at the very highest levels of security. It is built on an architecture that incorporates up to four levels of document encryption and four layers of infrastructure protection within a security-hardened environment. CommandHub extends these security layers to include a separate, dedicated code-base that allows custom security selections and fully compartments each customer deployment.

Logical security controls prevent information from accidental exposure and data leakage. The viewing, as well as updating, of documents is controlled so that users do not see folders or files in their document repository unless they have been explicitly granted access.

Ultra-Secure Mobile Vault

The patented HubVault technology derives both user authentication and the master encryption key from a user entered vault key. With no component of the encryption key or the user authentication stored (either on the device or anywhere else) the vulnerabilities from tools that can recover such components are eliminated, and the user does not need connectivity to access the data. Thus secure access is provided at all times, together with intrusion protection that eliminates any reliance on remote wipes that can be circumvented by disabling WiFi and mobile connectivity.

In addition to using device-level encryption, HubVault encrypts each file a second time with a unique key to further protect the data from forensic, and other, attacks, including those to backup images. When connectivity is available, double-encrypted file transfers provide file syncing and backups without further user input. HubVault shares all traffic with the mobile device via a double-encrypted tunnel. By way of example, a document being exchanged between an iPhone and an iPad goes through 16 separate encrypt/decrypt steps. And this is all transparent to the user and without any noticeable performance impact. Additionally, there is the option to protect documents while in use on the mobile device. Files can be opened in an in-memory version of a PDF editor which allows users to safely markup their files without the file being written to the unsecured device cache.

The HubVault technology is seamlessly integrated within CommandHub as well as HubDrop and is available for Android (Google), iOS (Apple), and Windows (Microsoft) based devices. The HubVault technology is selectively available for OEM licensing.

Deployment Options

CommandHub and HubDrop are provided as a Managed (SaaS) Service with hosting certified to Australian Signals Directorate (ASD) certified Unclassified DLM or full PROTECTED level. On-premises deployment options are also available.

CommandHub has completed the IRAP security process for Software as a Service and is awaiting ASD certification for inclusion in the ASD Certified Cloud Services List (CCSL) at the PROTECTED level.

CommandHub was founded by a dedicated team of highly experienced professionals encompasssing corporate governance, business process assurance, cyber security and document management disciplines. The company has a 'blue chip' customer base that includes state and federal government departments and major corporations around the world. It has trusted partners in Australia, Europe and the United States to provide the highest levels of customer assurance and support.

Within Australia, CommandHub has offices at:

For further information as to how we can help protect your sensitive information, please CONTACT US