Information System Safeguards

To safeguard all of the customer information handled within Sage Direct, we maintain strict physical, electronic and procedural safeguards to protect the information against unauthorized access. Key information system safeguards include:

Secure Servers:

Clients with customers who use eStatements can access their own information on the network through the use of a password. This information is stored solely on a secure network server and is deleted after no more than three statement cycles which can be monthly, quarterly or annually.

System Back-up:

All system information within Sage Direct is backed up using magnetic media. This back-up process occurs both weekly and monthly. All monthly back-up media are stored at a secure location offsite.

Anti-Virus Protection:

All computers used at Sage are protected with anti-virus software, which is updated on a daily basis. In addition, every inbound and outbound e-mail is scanned prior to reaching the e-mail recipient’s destination. All internal networks are isolated from outside intrusion via firewalls.

Password Protection:

The main FTP server at Sage only allows access to two directories, incoming and outgoing. They are both blind directories which means anyone outside of the internal network will not “see” any files in these directories. Confidential information is not sent outside the company, unless ownership of the file is established and an authorized representative of the company has given approval in writing. Any files containing personal information deposited in the incoming or outgoing directory are required to be WinZip 11.0 or PGP encrypted and protected by passwords which are sent separately via email or phone call.

Data Destruction:

All customer statement information (not including eStatements) is maintained on our computer system for no more than 31 days. Any hardware that is no longer in use has the memory destroyed and all programs erased by a qualified computer technician.