The confidentiality and security of provider information and the privacy of system users are critical priorities for CAQH. CAQH has implemented information security policies, standards, guidelines, processes, procedures, and best practices to strengthen its security program and to protect its information assets. EnrollHub is designed to be compliant with laws and regulations relating to the privacy of individually identifiable information.
The EnrollHub solution is housed in secure datacenters where multiple physical and electronic safeguards are implemented. Secure Internet access to application screens, use of passwords and certificates are used to help ensure only authorized use of the system. Powerful Transport Layer Security (TLS) encrypts the data in transition; the database content is also encrypted at rest and in backup to prevent unauthorized access to EnrollHub. Only authenticated users have access to their restricted data. Virus detection mechanisms are used to help ensure that the database and the websites are free of viruses. Routine encrypted back-ups protect volatile system data and are secured in an off-site storage facility.