You can trust that your member data is in good hands and proactively monitored.

MemberCentral takes the security of our customer’s data seriously and we incorporate security awareness throughout our product development and deployment lifecycles. Our risk management practices are oriented around physical, administrative, and technological controls and incident management and response procedures.

Infrastructure

With regard to physical security, MemberCentral uses industry leading infrastructure providers to host its platforms and store customer data. These providers maintain industry standard controls regarding the physical access to systems used to provide the services, including least-privilege logged access, CCTV monitoring, multi-factor access requirements to facilities storing MemberCentral data, and access identification controls.

Restricted Access

We restrict administrative access to customer’s accounts to employees and agents who need such access for the purposes of providing the MemberCentral services, and do not permit shared use of administrative login credentials. Customers also have the ability to grant user and administrative access to others, and are responsible for managing those users and credentials.

Third Party Audits

Internal control frameworks require more than just thoughtful implementation to be effective. At appropriate times in the software development and deployment lifecycle we engage qualified, industry-leading third-party forensics auditors to perform examinations of our systems and services (including audits and penetration tests) in order to evaluate system security, our development and deployment practices, version and software lifecycle management, and the risk of unauthorized access. MemberCentral’s executive leadership reviews these reports with our senior operational staff and counsel, and directs appropriate corrective actions for any identified vulnerabilities and risks.

Incident Reporting

Of course the reality is that no set of security controls can guarantee the security of any internet connected systems. While we are not aware of there ever having been unauthorized access to the data of a  MemberCentral customer, we maintain incident reporting and response procedures with escalation to executive leadership. MemberCentral will report any identified breach of the security which results in unauthorized access to a customer’s data as soon as reasonably practicable, in writing and in accordance with applicable law. If such an event were to occur, MemberCentral would provide you with all relevant information and documentation available to MemberCentral regarding such data.

We appreciate that our security is our customer’s security, and we maintain an ongoing commitment to implement and revise our security posture and practices in response to the evolving threat environment.