The confidentiality and security of member information and the privacy of system users are critical priorities for CAQH. CAQH has implemented information security policies, standards, guidelines, processes and procedures to strengthen its security program and to protect its information assets. COB Smart is designed to be compliant with laws and regulations relating to the privacy of individually identifiable information.
The CAQH COB Smart solution is housed in secure datacenters where multiple physical and electronic safeguards are implemented. Secure Internet access to application screens, use of passwords and certificates are used to help ensure only authorized use of the system. Data is encrypted between COB Smart and COB Smart users (encrypted in transit) and stored in the database (encrypted at rest). Data back-up media is also encrypted, all to prevent unauthorized access to protected information.
Only authenticated users have access to their restricted data. Virus detection mechanisms are used to help ensure that the database and the websites are free of viruses. Routine encrypted back-ups protect volatile system data and are secured in an off-site storage facility.