In a culture of HIPAA, SAS 70 and SOX, Scan One has security and privacy provisions to protect important documents and data.
Our attention to security and confidentiality is unparalleled and starts the moment your documents enter our chain of custody. We maintain a rigorous HIPAA environment and conduct numerous audits and penetration tests including, but not limited to SAS 70 Type II audits and Sarbanes Oxley audits.
Chain of Custody
We maintain rigorous security, which starts the moment your documents enter our chain of custody. At any point in time we can tell you who has 'touched' your data (physically or electronically) and what took place. All documents, whether submitted in hard copy or electronically, are bar-coded and aliases assigned for traceability as well as security.
Redundant Site
Our Online Document Center (ODC) is secured by a duplicate back-up site. In the event there is a failure, our operation would be fully functional within 15 minutes.
Confidentiality + Audits
Our employees receive regular HIPAA security and confidentiality training and are reconfirmed quarterly. We also conduct numerous audits and penetration tests, our own as well as those administer by our customers. These include: SAS 70 Type II audits twice a year, Sarbanes Oxley audits and numerous benchmark, performance, section and employee audits. Additionally, we perform a variety of vulnerability and penetration tests to assure your data is safe at all times.
Highlights
- Culture of security, confidentiality, privacy
- Formal document control program
- Enforcement and auditing of written policies
- Limiting physical access to facilities; full tracking of access to areas
- Employee identification and tracking of access to paper
- Employee background checks
- Limited employee access to information
- Formal on-the-job privacy training
- Mandatory HIPAA training
- Highly secure data centers
- Fully redundant data center sites across nation
- Regular vulnerability and penetration tests
- Professional liability business insurance
- Detailed security policy available to prospects and customers
