Every employee is assigned a unique login ID when accessing data and systems. Shared or generic accounts are not permitted. All access is individually attributable through unique credentials, and authentication events are logged for audit and traceability purposes.
Are all user activities related to data tracked and logged?
All user activities related to data access are tracked and logged…
Is the personal data encrypted during transmission between systems?
All data in transit is encrypted using TLS 1.3 over HTTPS (TLS 1.2+ minimum) across browser, mobile, HRIS/SSO, API and SFTP communications…