|
Summary
Background Information Services, Inc. is committed to safeguarding sensitive information and protecting the privacy and identity of the individuals who are screened through our services. BIS understands the concern for security and has taken great measures to protect integrity, availability and confidentiality.
Information Use/Voluntary Submission
In the course of business, Background Information Services, Inc., must collect certain pieces of information to be used in connection with conducting a background check. The information that BIS collects is absolutely necessary to perform a background check. Background checks that BIS performs are completed with the understanding that the consumer has given permission for the check to be conducted and personal information has been provided knowingly and is fully aware of the types of information being sought for their background check.
Personal information may be shared with 3 rd parties for the sole purpose of performing these authorized checks. These 3 rd parties may include credit bureaus, city, county, state and federal agencies and 3rd party businesses that BIS partners with to provide our services.
BIS does not provide information submitted to it for any purpose other than conducting the background check at a point in time for which permission has been granted. Additionally, BIS does not utilize the resulting information to build a secondary database to be used in the future or to resell or distribute the information in any form, with the exception of providing results to our contracted client for the intended and authorized purpose.
Security
BIS has taken exceptional steps to ensure that sensitive information remains secure. BIS utilizes an extremely secure environment. Data is stored on Compaq Alpha Servers with a commercially supported Unix operating system (TRU64DU). Any web-based forms that collect or reflect sensitive information are located on an SSL site that is password protected, with 128-bit session encryption. All passwords are stored encrypted. BIS’ SSL site is located at https://ssl.bisi.com.
Our systems capture the IP address, time, userid and date. Any activity while in the system is recorded and logged. Clients can specify individual IP addresses or a range of IP’s that are allowed access to BIS systems. BIS does log all login sessions.
BIS has an Intrusion Detection System that will flag an account after 3 invalid attempts and will lock the account out from logging in for a period of time and under some circumstances manual access must be restored by BIS. The system can identify dictionary attempts at username and password logins. Unauthorized users can be blocked from website for activity deemed suspicious.
BIS monitors employee access to information; BIS’ system tracks every computer number that accesses, changes or reports information within our system. Employee access is continually monitored. Physical access to records is restricted. BIS’ building is secure and has security personnel that conduct walk-throughs at regular intervals. Visitors are escorted while on the premises; our offices and mainframe rooms are restricted access areas. Keyed access to physical offices is limited to upper management.
BIS has protocols in place internally for maintaining confidentiality and privacy. BIS has numerous safeguards in place to promote sound practices in securing the sensitive information that we handle.
As Required By Law
BIS may disclose your personal information if required to do so by law or in the good faith belief that such action is necessary to conform to the edicts of the law or comply with legal process.
Links
BIS’ website contains links to 3 rd party sites. Please be aware that these companies’ privacy policies may differ from BIS. BIS is not responsible for the privacy practices of these sites. BIS’ policy relating to privacy pertains to information collected by BIS.
Browser Level Information
BIS Web servers automatically collect information about a site user's IP address, browser type and the URL that you just came from and which URL you next go to by reading this information from the user's browser (information provided by every user's browser). This information is collected in a database and used--in an aggregated, anonymous manner--in our internal analysis of traffic patterns within our Web site.
Cookies
A cookie is a data file that certain Web sites write to your computer's hard drive when you visit such sites. A cookie file can contain information, such as a user identification code, that the site uses to track the pages you have visited. BIS uses cookies for the purposes of authentication. We use this data on an anonymous basis and we do not correlate this information with personal data of any user.
Most Web site browsers automatically accept cookies, but you can usually change your browser settings to display a warning before accepting a cookie, or to refuse all cookies. However, if you choose to disable the receipt of cookies from our Web site, you may not be able to use certain features of the site.
Contact Us
Clients and consumers may contact BIS with questions or suggestions pertaining to BIS’ Privacy Policy at the following:
Phone: (800) 433-6010
Fax: (303) 442-7145
Email: service@bisi.com
Address: 1800 30th Street, #204
Boulder, CO 80301
|