Federal Information Processing Standard 140-2

Freezerworks products do not currently conform to Federal Information Processing Standard 140-2 (FIPS 140-2). Freezerworks data is stored solely in a database, but the database is not encrypted unless the system administrator enables database encryption at the server level. User names and passwords are automatically encrypted by the program, but the encryption scheme does not meet FIPS standards. Dataworks is investigating changing the encryption scheme in future versions.

Freezerworks software does not use cryptographic modules with firmware components for data storage and transmission as described in the Security Level 1 of FIPS 140-2, nor does Freezerworks interact with any physical security mechanisms as described in Security Levels 2-4.