In today’s environment more than ever before, clients across industries are concerned with the vulnerability of data collected, maintained and managed by service partners. Secova shares our clients’ (and their participants’) concern about the security of internet-based applications for benefits enrollment and administration. At Secova, we recognize these concerns and have continuously worked towards providing our clients with the highest assurance possible.

Secova is pleased to have vested the time and resources necessary to achieve and maintain ISO/IEC 27001:2005 certification. This certification, in tandem with our semi-annual SAS 70 Type II audit and our strict Data Protection and Privacy Policy provides our clients with the best assurance available in the industry. Secova's current policies not only protect clients' (and their participants') records from loss, destruction, and falsification, but also ensures compliance with legal obligations under HIPAA, SB 168 and Civil Code section 179.85 (a) to protect the privacy and provide for the security of personal data.

Secova's privacy and security policy applies to all employees of Secova and any of its subsidiaries. Secova has developed and implemented a privacy and security training program that all associates are required to complete each year. Employees who engage in conduct that violates company policies, practices, or standards, or whose performance is unsatisfactory may be subject to corrective action (including termination).