Vendor Compliance

There’s Nothing Accidental About Data Security

June 4, 2010

You’ve probably heard about Google’s accidental data harvesting issue. Apparently, the special cars it uses to collect online mapping information were also getting data from unsecured WiFi networks. I’ll say Google seems to be making all the right responses. Alerting government agencies. Cooperating with investigators.

Still an event like this makes you want to review data privacy practices at even the most mundane sites. Tim Paulus, a director of development here at Vendormate, recently recapped the safeguards in place at Vendormate.

Here’s what Tim had to say:

Vendormate partners with SunGard Availability Services for datacenter space, disaster recovery services and managed IT services. SunGard facilities have 24/7 on-site, dedicated security. They employ four layers of physical security including biometric controls that withstand the stringent HIPPA, ISO and SAS-70 Type II audits.

Each Vendormate user is assigned a unique user name and password that must be entered at each login. Passwords are stored in an encrypted form and cannot be retrieved by anyone, including Vendormate staff! That’s right, while we can reset a password to a new value, we cannot retrieve an existing one. After authenticating, the user identity accompanies each and every request to strictly enforce segregation of customer data.

Payment details have additional safeguards. All credit card data are protected via Secure Socket Layer (256 bit SSL) encryption. Payment details are transferred to our payment provider using the same SSL encryption technique immediately upon receipt. Credit card numbers are NEVER stored in the Vendormate database.

So Vendormate users can be confident that state-of-the-art data measures are in place to keep their data safe and secure.

Entry Filed under: security. Tags: data security, supplier information.