What is the best browser to use when accessing IPO Research Online?

IPO Research Online works with all modern browsers, but for the best experience we recommend either Google Chrome or Internet Explorer 10.

Some IPO Research Online functionality is not available in Internet Explorer versions 7-9 (particularly plugin-free drag & drop uploads). Internet Explorer 6 is not supported at all.

My room access is 'blocked', what does that mean?

The firm administering your account has set up a security policy which blocks accounts in certain circumstances, pending approval by an administrator. Depending on the firm’s policy, the administrator may contact you to confirm your identity before unblocking your account.

If your account has been blocked for some time, it is possible that the relevant administrator needs to be reminded to unblock your account. If you know who it is, you may wish to send them a reminder.

How do I change my IPO Research Online password?
  1. Log in to IPO Research Online
  2. Click My Details
  3. Change Password in the menu
  4. Change your password by entering your current password and a new password (twice).
How secure is IPO Research Online?

IPO Research Online provides the best security available for your data. The Safelink platform used for IPO Research Online uses strong encryption when data is transmitted and stored, and in addition our server systems are secured and regularly audited, and all processes are backed by a comprehensive security policy.

Where are IPO Research Online's servers?

IPO Research Online is provided from servers located in Jersey, Channel Islands, which are configured redundantly to ensure reliability of service. Our servers are connected via multiple internet connections, backed by uninterruptible power supplies which fail-over to gas turbine generators and are protected by several physical layers of security and CCTV monitoring.

What encryption does IPO Research Online use?

iRoadshow handles all documents, internal messages, entity names and properties, names and details of financial accounts and transaction details (collectively “data”) as follows:

Encrypted Transit

256 bit SSL/TLS encryption employed for all communications, protecting data from being read while it is travelling across the internet. This is industry standard and the same technology used by online banking facilities.

Encrypted Storage

IPO Research Online encrypts data before storing it to disk using an AES-256 cipher with a randomly generated, client-specific key. That key is itself encrypted using the passwords of authorised users. None of the encryption keys or user passwords are retained by ipoResearchOnline. Therefore, sensitive data is only readable to authorised users using their respective passwords.

Encryption Standards

We regularly review available encryption technology and the emergence of any potential weaknesses in the techniques employed by IPO Research Online to ensure that IPO Research Online is secure.

AES-128 is a widely used cipher that is currently considered to be secure; no substantial or practical weaknesses in the cipher have been found, and an effort to find a 128 bit key by “brute force” would take billions of years using available technology.

IPO Research Online’s use of the SSL/TLS protocol for encrypting data in transit follows industry best practice and is the best available option for securing transactions on the internet.

Why aren't the names of new documents included in emailed notifications?

Normally, activity notifications don’t contain much specific detail (like the names of documents or details of tasks). This is for two reasons – first, sending information via email can be a security risk as emails can be intercepted and retained by unauthorised third parties, and in many cases even the names of the documents contain sensitive information.

The second reason is that when IPO Research Online stores your information, it encrypts the names and contents of documents and folders (and much more), and doesn’t retain the keys. When it comes to sending the notification emails to you, it cannot actually decrypt this information, so it is actually not possible to include more than a count of the number of new documents even if we wanted it to.

There is a way around this – for any given room you can ask IPO Research Online to retain a copy of the key, which means that all data will remain encrypted, but IPO Research Online will be able to send detailed notifications to members of the room. This reduces the level of security back to the level offered by other data room providers, and theoretically means we (IPO Research Online’s provider) could read your data if we chose to. We won’t, of course. Note also that many other layers of security remain in force if you choose this option, including HTTPS encryption of your data while it is in transit and the usual access controls.