FAQs on Case Management Hub Security Processes |
The Case Management Hub platform is developed with the highest level of security protocols to be used for a wide range of organizations and clients including federal governments, state and local governments, large commercial enterprises, consulting firms and their clients, small & mid-sized businesses, non-profit organizations, agencies, educational institutions, healthcare & medical institutions, insurance companies, financial services firms, and more.
We apply a variety of security methods to ensure that the data you enter into our platform is safe, secure, meets regulatory compliance, and is available only to registered users that you add to your account. This page covers information about Case Management Hub’s data protection and security measures.
Table of Contents
- Case Management Hub Policies and Procedures
- International Regulatory Compliance Standards
- Case Management Hub Application Security
- Case Management Hub Security (Encryption)
- Our Legal Obligations to Our Customers
- Data Backups
- Data Retention Policy
- Customer Data Privacy and Security
- Unique Credentials Protocols
- Secured Environment and Firewall
- Data Collection and Transmission Protocols
- Legal
- Privacy Policy
- PCI Compliance
- Our Commitment to the GDPR
- Case Management Hub Terms of Use
Case Management Hub Policies and Procedures
Our operational policies ensure that we provide all our Case Management Hub team members with the necessary practices to build upon the strong foundations of their security onboarding. We utilize these policies daily and review them regularly.
Case Management Hub has implemented the following internal policies:
- Information Security Policy
- Access Control Policy
- Backup Policy
- Change Management
- Data Classification Policy
- Data Protection Impact Assessment (DPIA) Policy
- Data Protection Policy
- Data Retention Policy
- Disaster Recovery
- Security Risk Management & Governance
- Third-Party Risk Assessment Process
Application Security
Security is at the forefront of Case Management Hub’s development mindset. We’ve built both internal and external security checkpoints into our application development pipeline.
Our Engineering team embraces the culture of peer-review, ensuring that our coding guidelines are followed and maintained. We validate our deployments with regular ongoing security assessments, conducted with industry-leading external vendors.
We strive to have a long-term architectural vision for our application security that is continuously evolving. As we build new features for our product, we identify reasonable opportunities to further this vision in iterations, while maintaining a conscious security mindset.
Data Backups
At Case Management Hub we use Database replication to keep your data safe in the case of system failure. Full database backups are taken every day, stored on safe locations, and kept for seven days as an electronic copy. In case two or more database nodes would fail concurrently we would have to revert to a backup.
Data backup does not apply to visitor visitations to our sites.
Data Retention Policy
Upon cancelling your account, Case Management Hub will maintain the account data for 60 days after which the account data will be deleted. Where applicable or required by law we will keep the records longer.
For Group Accounts, we will save your project data for 60 days after you have closed out a project. During this 60-day timeframe you can always reactivate the project, and continue working on it.
Customer Data Privacy and Security
Case Management Hub utilizes some of the most advanced technology for Internet security available today.
When you access our site using a supported web browser, Secure Socket Layer (SSL) technology protects your information using both server authentication and data encryption. When you log in and access any page on your account, you will see a small lock icon at the top left section – to the left of the page’s URL – indicating that a secure connection has been established to our server.
Unique Credentials Protocols
Case Management Hub provides each user in your organization with a unique username and password that must be entered each time a user logs in. Case Management Hub issues a session “cookie” only to record encrypted authentication information for the duration of a specific session.
The session “cookie” does not include either the username or password of the user.
Case Management Hub does not use “cookies” to store other confidential user and session information, but instead implements more advanced security methods based on dynamic data and encoded session IDs.
Secured Environment and Firewall
In addition, Case Management Hub is hosted in a secure server environment that uses a firewall and other advanced technology to prevent interference or access from outside intruders. Customer Data is stored on a primary database server with multiple active clusters for higher availability.
Customer Data is stored on highly redundant carrier-class disk storage and multiple data paths to ensure reliability and performance. Backups are verified for integrity and stored in the same data centers as their instance.
International Standards
Case Management Hub takes the safety of its clients’ data very seriously.
We comply with a number of international standards, including PCI DSS, GDPR, FISMA, ISO/IEC 27001:2005, SAS 70 Type II, SysTrust, and Eu-US and Swiss-US Safe Harbor.
Data Collection and Transmission Protocols
Firewalls are in place exposing only the necessary ports through the internet and between different servers. Intrusion protection system (IPS) software is in place as a second layer of security, which will block access as soon as any suspicious login activity is detected.
Case Management Hub transmits data from the visitor’s browser to our system using HTTPS.
Case Management Hub Security (Encryption)
Data in transit is encrypted using the following protocols and ciphers:
- SSL Protocols
- SSL Ciphers
- Cross-functional data touchpoint protocols
Our Legal Obligations to Our Customers
Case Management Hub is committed to keeping your data private and secure. To this end, we have expressly stated how we will handle your private data.
For a greater understanding of the legal obligations Case Management Hub adheres to regarding data privacy, please refer to our Privacy Statement, as well as our Terms of Use agreement:
- Legal
- Privacy Policy
- Non-Disclosure Agreement (NDA)
- PCI Compliance
- Our Commitment to the GDPR
- Case Management Hub Terms of Use
As outlined in the Privacy Statement, Case Management Hub does not review, share, distribute, print, or reference your data except as provided in the Case Management Hub Terms of Use, or as may be required by law.
For exact information, please refer to the Privacy Statement, as well as the Terms of Use agreement. These items can be viewed by clicking the relevant links above.
Email us if you have any questions: Contact us.