CompanyMileage.com is dedicated to maintaining levels of security and compliance that meet or exceed the standards of HIPAA (Health Insurance Portability and Accountability Act).
We have implemented a three tiered system for ensuring the highest standards.
I. Encryption of all data
Split Knowledge Dual Control Passwords
Table Level Encryption
Password Rotation Management
Log file Encryption
Privileged user (root) protection
Complies with PCI DSS, HIPAA, HITECH, FISMA and other regulatory guidelines for encryption of data at rest
PCI Certified
Secure Offsite Key Management
II. Secure Facilities & Equipment
Servers located at The Planet with 24/7 Management and Monitoring
SAS70 Type II Data Center
Daily backups
Secure servers running Debian Linux maintained and serviced daily with any security patches
Firewalls in place to prevent unauthorized access to the system
256 bit encryption SSL
III. Privacy Policies
Client address books can be segregated by individual user, department or division
Client Names can be suppressed on physical reports generated by users
CompanyMileage will not share client data with any third parties without written authorization from Client
CompanyMileage data systems are securely stored and only accessible by authorized individuals of the company
To learn more about our HIPAA Policies or services please contact us today. Toll Free: 877.677.0377