| General LendingCycle Security Overview |
|
 You need Performance information when it is most pertinent, regardless of where you are. We understand that and have designed this solution to be easily accessible. To make sure that your data is secure, we incorporate many processes and procedures to protect the entire LendingCycle environment.
Physical Environment: All LendingCycle application and database hardware systems are hosted in a SAS 70 Type II Compliant 99.999 percent facility in Indianapolis, Indiana. This environment has 24-hour physical security and network monitoring by on-premises staff, redundant generators, redundant power sources, redundant network feeds, and other redundant systems.
Network Environment: All LendingCycle application and database hardware systems are protected by multiple and redundant firewalls that are monitored 24 hours a day. Plus, all LendingCycle systems containing databases have no direct connection to the Internet and only mutli-step/multi-layer VPN administration access that can only be utilized by LendingCycle Corporate Officers (logs of their activity are reviewed by a committee).
Physical Systems: All LendingCycle application and database hardware systems utilize redundant RAID storage systems, redundant power supplies (that are connected to separate circuits), and other redundant systems.
Database Environment: All LendingCycle data tables use a coded reference system instead of names and sensitive information is encrypted with AES cryptology (see Data Encryption). Direct access to production databases is highly restricted. Only LendingCycle Corporate Officers are allowed access, and logs of their activity are reviewed by a committee.
Data Encryption: All sensitive data (including passwords) is encrypted with AES cryptology (which is considered secure for US Government data by the NSA).
Application Encryption: LendingCycle encrypts user activities with 128-bit Secure Sockets Layer (SSL) technology. Plus, all login points utilize multiple security methods and have AutoComplete restricted.
Password Management: LendingCycle utilizes multiple password protection schemes and methodologies including strong 8+ character alpha numeric passwords, complex usernames, previous password restrictions, selectable password expiration time frames, multiple challenge questions, instant team expirations, and many others.
Disaster Recovery: All LendingCycle production systems are housed in Indianapolis, Indiana with a back center in Louisville, Kentucky.
|
