| Previous Question | FAQ Index | Next Question |
Q: How can I be sure that my personal information will be secure?
A: The security and privacy of your data has been the number one concern throughout the development of Identity Profiles' services. The security of the web site was confirmed and strengthened through a security audit by End Point Corporation completed on February 11, 2009.
The security of your data is achieved by the following:
Physical Security: The Identity Profiles' server is located in a secure data center, with locking cabinets and 24 X 7 electronic surveillance.
Secure Connection: Identity Profiles uses the same type of secure connection that is used for on-line banking. Identity Profiles uses high-grade (256 bit) encryption when transmitting your personal information over the internet.
Encryption: Your name, date of birth, address, phone, and email are stored in an encrypted format and can only be accessed using a carefully guarded encryption key (think secret decoder ring).
Social Security Number: Your social security number is not stored on the Identity Profiles server. We use the same technology that has been used to manage computer passwords for 30+ years. This allows us to recognize your social security number, but it is literally impossible to retrieve or derive your plain social security number from the information that is stored in the Identity Profiles database. Identity Profiles further protects your account by requiring that your social security number be provided before the username or password for your identity profile can be changed.
Date of Birth: Your date of birth is protected with almost the same zeal as your social security number. Identity Profiles' policy is to never disclose your date of birth. Identity Profiles further protects your account by requiring that your date of birth be provided before the username or password for your identity profile can be changed.
Non-Disclosure: The Identity Profiles business was designed with the philosophy that anyone who has a legitimate need to know your personal information will receive it from you. With this in mind, Identity Profiles will not disclose personal information to business clients. Identity Profiles will, however, allow business clients to request a comparison between a credit application and your identity profile. Identity Profiles will respond to such requests with either "MISMATCH" or "UNCONTESTED".
Transparency: Identity Profiles will send you an email notification any time a business client requests a comparison against your personal information. You will also receive an email notification any time your identity profile is changed.
Browser Security: Identity Profiles places a session cookie on your computer to track your login session. Your login session will automatically expire after 20 minutes of inactivity, or when your browser is shut down. To protect your personal information, you should always log out when you are done.
Identity Profiles signals browsers to not save a local copy of sensitive pages for access by the "back" button. It is recommended, however, that you shut your browser down when you are finished, especially if you are accessing your identity profile from a public place.
Privacy Policy: The mission of Identity Profiles, LLC is to shift identity ownership back into the hands of the individual. Protecting consumer privacy is an important aspect of this mission. You can review the Identity Profiles privacy policy here.
| Previous Question | FAQ Index | Next Question |