FAQs: What about security over SekChek files after they are processed?

SekChek

What about security over SekChek files after they are processed?


We obviously appreciate the sensitivity of the data contained in SekChek files and reports, so we have implemented very strong controls to ensure they remain confidential and are promptly removed from our system after processing. For example:

  • By default, all Client data (Scan data and Report files) is automatically deleted from our system after 5 days. Let us know if you want to define a shorter retention period.
  • During this period, client data is stored in encrypted format and protected against unauthorised access.
  • We do not publish or divulge the address of our Processing Centre.
  • Access to our premises and Servers is controlled by several layers of physical security controls.
  • Stringent background checks are performed on all potential employees.
  • All employees sign a strict confidentiality agreement / NDA on an annual basis.
  • Our disciplinary code defines a zero-tolerance approach towards acts of dishonesty and poor ethics.
  • All printed material is shredded and burnt. SekChek reports are not printed.
  • We abide by the same professional rules of conduct that exist between an auditor & his client.
  • Security controls over SekChek files and reports are stronger than similar controls over most other confidential client data.
  • Our security procedures are independently audited on a regular basis.

Ā