Your privacy,
our priority

We go above and beyond to set new standards for your security and privacy.

While credit card processing statements do not contain sensitive information, we remain steadfast in our commitment to safeguarding your data and trust. Despite not being bound by industry-specific regulations, we demonstrate that commitment through our choice of encryption technology, stringent data handling practices and employment integrity practices.

Organizational security

How the company, its people and its devices are governed, from annual risk assessments to what every new hire signs.

The company's risk assessments are performed at least annually. As part of this process, threats and changes (regulatory and technological) to service commitments are identified and the risks are formally assessed. The risk assessment includes a consideration of the potential for fraud and how fraud may impact the achievement of objectives.

Data & privacy

Where your data lives, how it's encrypted and backed up, and the policies that govern who may see it.

Policy

Privacy Policy

By adhering to standardized privacy policies, we ensure that our clients' personal and financial information is treated with the utmost respect and confidentiality.

Read our Privacy Policy →

Policy

Cookie Policy

We use cookies to enhance your browsing experience, understand how our website is used and provide personalized content. Cookies help us analyze traffic, remember preferences and improve our services.

Read our Cookie Policy →

Policy

Non-disclosure & MNPI

All information is treated under non-disclosure terms, never shared, sold or used by any third party. All staff are treated as covered persons for material nonpublic information, such as revenue, under Insider Trading Policies.

Read the Confidentiality & Insider Information Policy →

Encryption

Data encryption utilized

Datastores housing sensitive customer data operate on Amazon Web Services (AWS), ensuring all data is encrypted when stored ("encryption at rest.")

Backups

Backup processes established

Our Data Backup Policy sets rigorous requirements for backup and recovery: regular scheduled backups, encrypted storage in secure redundant locations, and clear recovery protocols for swift restoration.

Retention

Data retention and storage

Customer data is stored using Box.com, an industry leader in security and regulatory compliance. Data is retained for defined periods based on operational, legal and regulatory requirements, then securely disposed of.

Healthcare & dental clients

HIPAA,
in plain terms

The US Department of Health and Human Services (HHS.gov) has stated that credit card processing does not fall within the scope of HIPAA, as no health record information is being stored, only card payment information, and collecting payments is explicitly excluded from HIPAA mandates.

No cardholder, bank account or other material information is shown on credit card processing statements.

See 45 CFR 164.502(e), 164.504(e), 164.532(d) and (e)

Insurance

Three policies stand behind the advice we give and the data we hold.

General Liability$2MMper occurrence · $2MM general aggregate · no deductible

Whether it's an accidental mishap involving property damage or an unforeseen liability, our General Liability policy ensures peace of mind for VeriFee and our stakeholders, with rapid and seamless resolution of potential claims.

Cyber Security$1MMpolicy limit

Cyber threats are an ever-present risk. Our Cyber Security coverage ensures VeriFee can respond to and recover from incidents such as cyberattacks, protecting our business and our clients from financial and reputational harm.

Errors & Omissions$2MMper claim · $2MM aggregate annually

Our clients trust us to deliver expert advice. E&O Insurance provides a safety net for unforeseen professional oversights, ensuring potential claims do not disrupt our operations or compromise client relationships.