Security Standards

Introduction

We understand that security is critical to our Insight e-Tools users and we are serious about safeguarding our customers’ and partners’ personal information online. As a primary security measure, users may access personal information online from the Insight e-Tools web site only after registering and creating a personal ID and password. Although we cannot guarantee absolute confidentiality of data transmitted over the public Internet, we encrypt all data transmissions between your computer and our data center using the strongest-available, industry-standard SSL (Secure Socket Layer) protocols. Data transmissions to us, including personal IDs and passwords, are not decrypted until they are inside our secure perimeter. Once there, they are subjected to additional security procedures common to the best business practices of the leading e-commerce companies. Any information provided to our users is encrypted before it passes our secure perimeter and is decoded once it reaches the user’s browser.

SOC 2 Type II Compliant

We understand the responsibility we have to protect your sensitive information housed within our systems. Our company is SOC (System and Organization Controls) 2 Type II compliant and audited yearly.

Encryption

The encryption process, which scrambles user data into a form that only the user’s browser and the Insight e-Tools web server can understand, is an effective way to achieve data security. Encryption significantly reduces the possibility of unauthorized access to information. To access Insight e-Tools you MUST use a browser that supports 256-bit encryption.

Personal IDs and Passwords

Personal IDs are used as a means of identifying Insight e-Tools users, and are not encrypted information. On the other hand, for security reasons, Passwords are encrypted and are known only to the individual user. No one working in association with Insight e-Tools will ever ask for your Password, and you should never furnish it to anyone who claims to represent Insight e-Tools. Together, Personal ID and Password are the user’s credentials to access personal information online and add to the security of the Insight e-Tools web site.

Password Security

Users are allowed three attempts to enter their Personal ID and Password correctly on the login page. If unsuccessful, the user can select the “Get Help” link below the question "Forget Your Password?" to send an e-mail message to the customer service representative requesting that a Password be reset. It is a good additional security measure to change your Password frequently. Simply log in, go to "Make Changes", and click on "Change Login." Also, if you forget your Password, you may request that it be reset. Just click on "Get Help" on the login page.

Automatic Log Out

As a safety precaution, after twenty minutes of inactivity the secured browser session will be terminated. If the session is terminated before the specific online tasks are complete, the user can return to the login page to resume work. When the Internet session is finished, we encourage users to log out by clicking on the "Log Out" button. It is also a good idea to close the browser after logging out, and to occasionally clear the browser history to ensure that any personal information is cleared from the browser's memory.

Browser Navigation

As an additional security measure, we prevent pages containing any user’s private information from being saved on their computer's hard drive. Similarly, we don’t use “cookies” to save information on the user’s PC.

Summary

Users (our partners and customers and their employees) play an important role in protecting security. Above all, it is crucial to maintain the secrecy of Internet Passwords. Passwords should never be told to anyone or written down in a place where it could be associated with any other Personal ID. If employees think that someone else may have access to their Password, they should contact their employer immediately. It's a good idea to change Passwords often (this can be done at any time by going to "Make Changes" and clicking on “Change Login”).