sas70: audited security
Your data is secure. And we can prove it.
Security is in our DNA. We’ve been complying with the Children’s Online Privacy Protection Act (COPPA) since 2000 when we started our KidzEyes.com panel, and we regularly receive confidential information from our clients in the financial services and healthcare industries. But today, clients in all industries are becoming more conscious of the importance of safeguarding customer data even when the confidentiality of their customer information doesn’t involve Graham-Leach-Bliley or HIPAA regulations.
Just being “security conscious” isn’t enough—neither is having a bunch of ad hoc security procedures. Data security requires systematic procedures across the whole organization, accompanied by regular reviews and training. It requires an audit trail so compliance can be demonstrated.
But perhaps most of all, security requires regular testing by third parties. Policies and procedures are all very well, but what counts is performance, and regular auditing is the only way to judge actual performance.
We’re proud to say that we conduct an annual SAS 70 audit, the standard developed for service organizations by the American Institute of Certified Public Accountants that provides an in-depth examination of a firm’s information technology and processes.
We’d be pleased to share the results of our most recent audit with you to demonstrate that we have proven controls and safeguards in place to protect your research data and customer information.
