Updated April 2005 Encryption. We use all reasonable means to provide secure transmission of your information from your computer to our servers. When you transmit personal information to us, we encrypt it using Secure Socket Layer (SSL), the current industry-standard encryption technology. Encryption provides a secure means to protect your information as it passes over the Web to our servers. Firewalls. Our servers and other technical infrastructure are protected from network intrusion using firewalls and other means. Internal Access. Our employees and contractors have occasional, legitimate needs to access our data servers for purposes of system troubleshooting and maintenance. We ensure that such access is granted only to those who have such needs. All such individuals have signed confidentiality agreements with Medem and are continually made aware of their obligations regarding user information. Access is controlled via preassigned user accounts that require multiple levels of authentication and only the minimum amount of access necessary is permitted. All staff are periodically trained regarding security protection of their personal workstations. Physical Site Security. The facilities that house our servers, network devices, backup data storage media, and other equipment and information are physically secured and attended. Access is strictly limited to only those individuals who require it for a legitimate purpose. Policies and Procedures. We continuously evolve and update our internal information security policies and our business continuity and disaster recovery plans. We perform risk assessment, security audit, and system test activities on an ongoing basis. Our employees and contractors receive frequent training and/or reminders regarding information security and protecting the confidentiality of your information. Standards and Regulations. We are committed to meet or exceed regulatory and industry self-regulatory guidelines regarding privacy, confidentiality, and information security. On an ongoing basis we will review and adapt to statutes, regulations, formal private-sector standards, and informal policy guidelines as they apply. In particular, we will comply with all applicable provisions of the final Health Insurance Portability and Accountability Act (HIPAA) rules for information privacy and security. User Passwords. If you register with us, your personal information is password-protected, so only you have access to it. It is your responsibility to ensure the security of your User ID and password. If you believe this security has been violated, please contact Medem Member Services by e-mail at info@medem.com, or by phone, toll-free, at 1.877.926.3336 within the United States. Click here to return to the Medem Privacy and Confidentiality Policy.

© 2005 Medem, Inc.

back to top