|
Comprehensive Privacy & Security Statement
Information Display
Achievement Tec systems request confidential and sensitive personal data. To ensure that all data gathered remains confidential, we validate a users login and password against our records. Further, we employ a sophisticated commercial secure data transmittal method, Secure Socket Layer (SSL) with 128-bit encryption.
Collection and Use
Achievement Tec is the sole owner of the information collected on this site. We will not sell, share, or rent this information to others in any way whatsoever. Achievement Tec collects information from users at several different points on our website, including during initial account and password setup and during online ordering of background verification and drug screening requests. This information is gathered solely for the purposes of creating client accounts, as well as processing orders placed by said clients.
Password Setup
In order to use any of our interactive online applications, background and drug screening procedures, or to access participant materials, a client must first be assigned a password through Achievement Tec. Further, online applicants are allowed to elect their own password when assigned their unique codes during the screening process.
Security
This website takes every precaution to protect our users' information. Whether users submit sensitive information via the website or fax, the information is protected both online and off-line. Once the user closes their browser, the site is permanently terminated for that session. We also use Session Time Out to regulate the amount of time that a user may remain inactive on the site. Finally, the servers that we store personally identifiable information on are kept in a secure environment at CI Host (click here for detailed Data Center specifications).
While we use SSL encryption to protect sensitive information online, we also do everything in our power to protect user-information off-line. All of our users' information is restricted in our offices. Only employees who need the information to perform a specific job are granted access to personally identifiable information. All sensitive hardcopy information that is no longer needed is shredded by professional document disposal services.
Client Verification
In order to verify the identity of any new background verification client account, strict due diligence procedures are adhered to, which include, but are not limited to, the following:
Verification of telephone listings
Verification of website and/or domain registration
Verification of corporation records by the clients state of business
Verification of mandatory licensing for certain types of businesses
Verification of business bank account existence
Verification of trade references
Written declaration of the business permissible purpose for accessing consumer reports
Links
Some sections of our website contain links to other sites. We provide these links as a service to participants and users. Please be aware that Achievement Tec cannot attest to the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects personally identifiable information. This privacy statement applies solely to information collected and displayed here.
Surveys
From time to time, Achievement Tec may offer visitors an opportunity to comment on our services or to offer suggestions. Such surveys are optional and any data gathered there will be kept anonymous and used only internally.
Technical Configuration
Virus Protection
We use a combination of detection methods to ensure that our file server receives the maximum protection possible on multiple levels. We implemented an extended program for maximum anti-virus protection for file servers, with direct support for terminal networks
Fully automated update process keeps our system up-to-date
Includes all program and virus database updates throughout life of the license
Third Party Secure Data Backup Facility
The NSTOR Data Backup and Disaster Recovery Software/Hardware System provides online, offsite, backup storage of client computer based data to a secure, controlled access Data Center located in the geographically dispersed locations remote from the customers site. All data is compressed and encrypted at the customer location then electronically transmitted to the Data Center Location via the public internet, private internet or secure Remote Access dial up circuits. By design NSTOR is a push communication system; i.e., all communication for date backup and /or data recovery are initiated by the customers computer equipment. No communications / data transfer / or recovery can be initiated from the remote Data Center. This architecture insures the customer, and only the customer, can access their data.
All customer information, data and communications, is encrypted on the customers computer using the Triple DES encryption algorithm. The Triple DES (Data Encryption System) is a data encryption scheme utilizing a 112 bit data encryption key. This key is randomly generated by the Data Center Server during the agent installation process on each customer computer. The Triple DES encryption algorithm is a commercial encryption process in wide use both within the commercial and government sectors. It is significant to note that the Triple DES encryption system and the date encrypted with it had never been successfully hacked or broken into.
If you have any questions, please e-mail us.
© 1999-2005 Copyright, Achievement Tec All rights reserved, Updated 7/05/05 - Privacy Policy
|