EasyAppsOnline Security Information

What do I tell my clients who have questions about the security of EasyAppsOnline?

• We sign Business Agreements with the carriers that we represent in regards to the security of our clients.  You may also tell your client that we implement the following processes to ensure the protection of data:
• "Intrusion" testing on a regular basis in addition to having hardware, software firewalls, and intrusion detection software.
• SSL Certificate with $1M indemnification - encrypting data as it is transmitted.
• Data Backup held off line in secure area.
• Programming and data testing is performed in restricted area with keypad entry. 
  
  Where is the data stored?
  
• The data is stored on a third party server that has both hardware and software firewalls.
  
• Our applications has a software firewall and is protected by McAfee Secure and is tested daily against security intrusion, also our server has “Vulnerability” testing performed on a regular basis, again to ensure data is secure and protected.
  
• There is a possibility of storage on the brokers PC of the user’s insurance applications, but they are required by law and HIPAA Compliance to protect and secure this PHI data. 
  
• Everyone that comes in contact with or stores the data has signed a Privacy statement or Business Associate Agreement and is legally responsible for the protection of the PHI.
  
  Who has access to the internal content of the data?
  
• The insurance carriers and their underwriters.
  
• The brokers and their benefit employees.
  
• The programmers and quality team of EasyAppsOnline, of which all are trained on HIPAA Compliance and work in secured areas behind keypad locked doors, entry tracking, and restricted access.
  
  Is the data used for any purpose other than health insurance?
  
  To the extent that insurance companies and underwriters follow the law and their own contracts: NO. They are not allowed to sell/trade/barter their lists.
  Please note: this is especially important to employees with children; parents are passionate about protecting their children from identity theft.
  PHI or there data collected by EasyAppsOnline is NEVER sold or used for any other purpose than for health insurance enrollment and is transmitted to the carrier’s via a secure portal.

Data entered via the EasyAppsOnline system is much ore secure than the "Old Fashioned Paper Way" for several reasons. 

1.   When paper applications are completed the medical data can be viewed by the Employer or other HR staff at the employees office.

2.   Paper applications require the insurance broker or staff to review or "Scrub" the data for missing or incomplete information, this manual task slows down the rating process and also exposes the employees private information to another individual that really would not need to see the data if sent electronically.

3.  Paper applications are sent to the carrier via Fax, (Email - Secure or Unsecured? depends on the brokers office), regular mail or FedEx. EasyAppsOnline simply posts the completed applications on a secure site that the insurance carriers log onto and retrieve the applications.