Protecting our Customer Data is the Solution.

PCI-DSS Certified

At HealthyAmerica, we take the protection of your banking and credit card information very seriously. Our secure, dedicated server is PCI-DSS Certified, ensuring that we adhere to the highest standards for payment card industry data security. This certification guarantees that our systems are equipped with robust security measures to protect your sensitive information.

KEY FEATURES OF OUR PCI-DSS CERTIFICATION

• Dedicated, Encrypted Server: We use a dedicated server that is fully encrypted to ensure your financial data is secure from unauthorized access.
• Quarterly Security Scans: To maintain our certification, we conduct quarterly security scans. These scans help us identify any vulnerabilities and ensure our systems remain secure and compliant with PCI-DSS standards.
• Limited Data Access: To further safeguard your information, no member banking or credit card details used for billing are stored on the internet. Our staff can only view the last four digits of your credit card number, preventing unauthorized access to your complete billing information.

By implementing these stringent security measures, we aim to provide you with peace of mind, knowing that your financial information is proteced to the fullest extent possible.

SOC 1 & SOC 2 Certified

At HealthyAmerica, protecting our membership data and personal identifiable information (PII) is as priority for our team. Our member data servers undergo rigorous annual certifications to maintain the highest level of security and reliability.

SOC 1 CERTIFICATION

The SOC 1 certification focuses on implementing secure financial controls. This certification ensures that our financial processes are managed with utmost precision and security, providing assurance to our members that their financial information is handled with care.

SOC 2 CERTIFICATION

Our SOC 2 certification is dedicated to more extensive criteria, including availability, security, processing integrity, confidentiality, and privacy. This certification is vital in ensuring that our systems are not only secure but also reliable and capable of maintaining the privacy of your information.

• Penetration Testing: As part of the certification process, we conduct thorough penetration testing. This testing helps us identify and address vulnerabilities, ensuring our systems are fortified against potential threats.
• Annual Review: Every year, we commit to ensuring that our member data systems meet the stringent requirements of both SOC 1 and SOC 2 certifications. This ongoing commitment helps us maintain the trust and confidence of our members.

By adhering to these certifications, HealthyAmerica demonstrates its dedication to maintaining the highest standards of data security and privacy for our members.

HA Security Policies

HealthyAmerica and H A Partners, Inc. both have comprehensive written security policies and procedures in place. Our commitment to security is reflected in our rigorous adherence to these policies and the maintenance of our security certifications, including PCI-DSS, SOC 1 and SOC 2. In addition to these certifications, our procedures encompass a variety of security measures designed to protect your information both online and offline.

KEY ASPECTS OF OUR SECURITY POLICIES

• Secure Password Protection Policies: We enforce robust password protection protocols to ensure that access to sensitive data is restricted to authorized personnel only. This includes regular password updates and the use of complex password structures.
• Employee Procedures: Our employees are trained to follow strict procedures regarding data access, handling, and sharing. This training ensures that all team members are aware of the latest best practices in data protection and are equipped to handle your information securely.
• Building Security: Our physical location is equipped with state-of-the-art security systems to protect against unauthorized access. This includes access to control systems and surveillance cameras to monitor and maintain building security.
• Paperwork Security: We implement strict protocols for handling physical documents to prevent unauthorized access and ensure that sensitive information is securely stored and disposed of when no longer needed.
• Computer Security: Our computer systems are protected with advanced security measures including firewalls, antivirus software, and regular software updates to safeguard against cyber threats.

By implementing these comprehensive security measures, HealthyAmerica and H A Partners, Inc. demonstrate a steadfast dedication to safeguarding your personal and financial information, providing you with peace of mind knowing your data is in secure hands.

Good Practice Procedures

At HealthyAmerica, we are committed to implementing top-tier security procedures to ensure the protection of your data. These measures are designed to maintain security integrity and prevent unauthorized access to sensitive information.

FIREWALL PROTECTION

We utilized robust firewall systems as a primary defense against external threats. These firewalls act as a barrier between our trusted internal network and untrusted external networks, effectively monitoring and controlling incoming and outgoing network traffic based on predetermined security rules.

STRONG PASSWORD PRACTICES

HeatlhyAmerica enforces stringent password policies to enhance security:

• Regular Password Changes: All employees are required to change their passwords every 90 days. This frequent update helps reduce the risk of unauthorized access due to compromised passwords.
• Complex Password Requirements: Passwords must meet specific criteria for complexity and length, incorporating a mix of letters, numbers, and symbols to create strong, secure passwords.
• No Password Sharing or Written Passwords: We strictly prohibit the sharing of passwords among team members and the practice of writing down passwords within the office. This prevents unauthorized access and maintains the confidentiality of user credentials.

EMPLOYEE COMMITMENT

Our team comprises dedicated professionals, many of whom have been with HealthyAmerica for over 10 years. This long-standing tenure reflects their commitment to maintaining a culture of security and responsibility. Each team member understands the importance of practicing safe and secure measures to protect member data, and they are continually trained to stay abreast of the lastest security practices.

By adhering to these good practice procedures, HealthyAmerica ensures that your information is safeguarded with the utmost care and responsibility.