Privacy POlicy
Verify Tenant respects the privacy interests of all clients, employees and job applicants. We are committed to protecting any information provided to Verify Tenant . We follow industry best practices to safeguard personal information by securing our methods of data transmission and storage.
Security is a high priority and is an integral part of our system. Attention is given to high publicity threats such as viruses, denial of service attacks and other malicious activities over the Internet, as well as to maintaining the integrity and confidentiality of sensitive application data such as credit reports, social security numbers, and other identifying information.
Client Authentication – All access to the system is authenticated by username/password and sensitive information is available only to key personnel. Under no circumstances do unauthorized persons have access to personal information. User IDs and passwords are deactivated immediately upon termination or change of job assignment. Password-controlled access requires clients to authenticate through a private login ID and password before entering the system. After authenticating to the system, sessions that remain inactive for a period of time are expired, requiring the client to re-authenticate before continuing. Passwords are protected in the system using sophisticated hashing schemes, never shared, and combine with a Secure Sockets Layer (SSL) protocol transport layer to protect against eavesdropping, server impersonation, and stream tampering.
Passwords must be reset at least every 30 days and must conform to the following best practices:
- Minimum 8 characters in length
- Mix of alpha, numeric and special characters
- No re-use of a password for 6 months
- No automatic scripting of passwords
IP Restrictions – System access can be further restricted at the group or user level by IP address or IP range. Any attempt to authenticate to the system from a client machine outside of the configured IP address or IP range will be rejected.
Encryption – All transactions are performed in a secured environment. All transmission via Verifytenant system uses the Secure Sockets Layer (SSL) protocol with 128-bit encryption. The data travels encrypted and can only be decrypted with a public and private key pair.
PPI (Consumer Information) - Personal information is processed only with the consumer's knowledge and authorization. Only information that is actually needed is collected and processed. Personal information is protected from unauthorized or accidental disclosure and is only seen by those persons who need it to perform their job to provide the products and services authorized by you. Personal information is retained only as long as is required by law.
Client Responsibility – Clients are expected to guard their password carefully and to not share it with or disclose it to anyone, for any reason. Verify Tenant staff will never ask clients for their passwords. Clients must also ensure the security of their Veryfytenant sessions by completely logging out of the system when finished and not leaving active sessions unattended. Paper and electronic copies of reports must be carefully controlled to prevent the unauthorized distribution or disclosure of personally identifying applicant information.
Clients entering into service with Veryfytenant are required to sign an agreement verifying permissible purpose and compliance with the law. In addition, as required by our agreement with the credit bureaus, Verify Tenant must arrange an on-site inspection of the premises for each client who will be ordering credit reports. As such, the client must allow a bureau-approved third party vendor to conduct the inspection prior to requesting any credit reports from Verify Tenant.
A robust and secure system requires a multi-faceted solution with hardware, software, and education. Critical to the success of any secure system is the education of its user community and employees on the importance and sensitivity of information. Knowledge of why and how data is secured, and the permissible uses of all information, is essential in maintaining the integrity of the system and its contents.
