Benefits Communication

Peace of mind SECURITY

Security is at the heart of what we do at the BORIS offices. Looking at other online providers, it is shocking how unsecure a lot of them are. Determined not to follow in their footsteps, we have taken every precaution to ensure your data is safe.


The following is true for the portal domain (




Cyber Essentials Plus

We’re especially proud of our Cyber Essentials Plus accreditation. This is a set of comprehensive tests carried out by an external certifying body, using a range of tools and techniques.

Penetration testing

We’ve undergone thorough penetration testing by a fully accredited and authorised cyber essentials firm to ensure we have the best defences in place to prevent anyone attempting to break into our servers.


We’ve chosen Rackspace to host our servers. This means our servers and your data is stored alongside the servers that power the world’s biggest and most renowned internet companies.


All company and employee information is encrypted in transit and on our servers, is authenticated using AES_128_GCM and uses ECDHE_ECDSA as the key exchange mechanism.


All company information is backed up on a monthly basis to ensure your data is always safe and recoverable. Our backups are also encrypted to ensure maximum protection for your data.

2 Factor Authentication (2FA)

BORIS enables you to set up 2FA when logging in to your BORIS portal which we strongly encourage. This means a code generated on your mobile device is needed to log in as well your username and password. This provides an additional banking grade security layer to protect your data from unauthorised access.


The Employer and Employee portals are encrypted far beyond the level of most other cloud portals and with the latest TLS (Transport Layer Security) mechanisms which we regularly update. We’re proud of our A rating on Qualys SSL Labs.