Data Backups

Daily backups are made for the entire System database, which includes Customer information as part of the Business Associate Agreement with the Server Farm. Backups can be retrieved in the event of an emergency by Enfoglobe System and Database Administrators.

In case of a future emergency disabling access to the System, the Security Officer is encouraged to use the Emergency Contact export function to periodically export an encrypted version of customer information as a backup.

SSL (Secure Socket Layer) Encryption

Access to all online functions in the System is through Internet browsers and is secure. All data that is transferred is encrypted by an SSL (Secure Socket Layer) method, which makes the data unreadable by a third party. SSL is the standard security technology for establishing an encrypted link between a Web server and a browser. This secure link ensures that all data passed between our System’s servers and browsers will remain private and secure.

Enfoglobe ystems use two-type encryption. First the application is encrypted by an SSL asymmetric exchange public key and then all exchanged data is encrypted by an SSL symmetric pre-shared key. This is a safe and fast method to encrypt data that is in transit. SSL guarantees encryption for each System domain.

Data Encryption and Decryption

Enfoglobe Systems also encrypt all User passwords, Customer/Patient Data Exports and all communication functions. Each User password is encrypted by an HMACSHA256 encryption and stored in an encrypted database. This method makes the passwords less likely to be intercepted by a third party.

All Client Data is encrypted on the Server as part of features provided by the Server Farm. The Server Farm uses a 256-bit Advanced Encryption Standard, with each encryption key also being encrypted. Keys are regularly rotated to prevent a key from being copied and used.

When a User account is created, the System generates a password and encrypts it. Passwords later changed by the account owner are also encrypted before being stored in the database. The database stores only the encrypted password version using a HMACSHA256 encryption key.

Unique User Identification

Enfoglobe Systems require all authorized Users to have a unique login and password. Systems automatically generate new User ids in the format: User’s first name, User’s surname, and User’s Database Identifier (Example, John Smith could be JohnSmith37).

Strong Passwords

A strong password is generated by the System during User account creation and is encrypted. The assword is stored in an encrypted form in the database. Passwords can be reset by the owner of the User account or an Enfoglobe System Administrator. Passwords must be  a minimum length of 8 characters, containing one capital letter, 1 number, and 1 special character. 

Blocking Concurrent Logins

Enfoglobe Systems prevent concurrent logins into the same account from multiple locations/devices at the same time.  This security feature prevents a login by an unauthorized person if, for example, theft occurred of user credentials and another person attempted to login

Disabled “remember me” Feature 

Enfoglobe Systems have the “remember me” login feature disabled by default in order to prevent persons who may gain unauthorized access to a User’s computer. 

Automatic Logoff

Enfoglobe Systems will log off the current user if the session is inactive for more than the Auto Logout Time set in the System. The default automatic logout time is set to 10 minutes. Auto Logout Time value can be changed according to the Client’s preference. When a user closes an active browser page without logging out from the system, the user will be immediately and automatically logged out.

 

 

 

 

Data Backups

Daily backups are made for the entire System database, which includes Customer information as part of the Business Associate Agreement with the Server Farm. Backups can be retrieved in the event of an emergency by Enfoglobe System and Database Administrators.

In case of a future emergency disabling access to the System, the Security Officer is encouraged to use the Emergency Contact export function to periodically export an encrypted version of customer information as a backup.

SSL (Secure Socket Layer) Encryption

Access to all online functions in the System is through Internet browsers and is secure. All data that is transferred is encrypted by an SSL (Secure Socket Layer) method, which makes the data unreadable by a third party. SSL is the standard security technology for establishing an encrypted link between a Web server and a browser. This secure link ensures that all data passed between our System’s servers and browsers will remain private and secure.

Enfoglobe ystems use two-type encryption. First the application is encrypted by an SSL asymmetric exchange public key and then all exchanged data is encrypted by an SSL symmetric pre-shared key. This is a safe and fast method to encrypt data that is in transit. SSL guarantees encryption for each System domain.

Data Encryption and Decryption

Enfoglobe Systems also encrypt all User passwords, Customer/Patient Data Exports and all communication functions. Each User password is encrypted by an HMACSHA256 encryption and stored in an encrypted database. This method makes the passwords less likely to be intercepted by a third party.

All Client Data is encrypted on the Server as part of features provided by the Server Farm. The Server Farm uses a 256-bit Advanced Encryption Standard, with each encryption key also being encrypted. Keys are regularly rotated to prevent a key from being copied and used.

When a User account is created, the System generates a password and encrypts it. Passwords later changed by the account owner are also encrypted before being stored in the database. The database stores only the encrypted password version using a HMACSHA256 encryption key.

Unique User Identification

Enfoglobe Systems require all authorized Users to have a unique login and password. Systems automatically generate new User ids in the format: User’s first name, User’s surname, and User’s Database Identifier (Example, John Smith could be JohnSmith37).

Strong Passwords

A strong password is generated by the System during User account creation and is encrypted. The assword is stored in an encrypted form in the database. Passwords can be reset by the owner of the User account or an Enfoglobe System Administrator. Passwords must be  a minimum length of 8 characters, containing one capital letter, 1 number, and 1 special character. 

Blocking Concurrent Logins

Enfoglobe Systems prevent concurrent logins into the same account from multiple locations/devices at the same time.  This security feature prevents a login by an unauthorized person if, for example, theft occurred of user credentials and another person attempted to login

Disabled “remember me” Feature 

Enfoglobe Systems have the “remember me” login feature disabled by default in order to prevent persons who may gain unauthorized access to a User’s computer. 

Automatic Logoff

Enfoglobe Systems will log off the current user if the session is inactive for more than the Auto Logout Time set in the System. The default automatic logout time is set to 10 minutes. Auto Logout Time value can be changed according to the Client’s preference. When a user closes an active browser page without logging out from the system, the user will be immediately and automatically logged out.

 

   


 

Data Backups

Daily backups are made for the entire System database, which includes Customer information as part of the Business Associate Agreement with the Server Farm. Backups can be retrieved in the event of an emergency by Enfoglobe System and Database Administrators.

In case of a future emergency disabling access to the System, the Security Officer is encouraged to use the Emergency Contact export function to periodically export an encrypted version of customer information as a backup.

SSL (Secure Socket Layer) Encryption

Access to all online functions in the System is through Internet browsers and is secure. All data that is transferred is encrypted by an SSL (Secure Socket Layer) method, which makes the data unreadable by a third party. SSL is the standard security technology for establishing an encrypted link between a Web server and a browser. This secure link ensures that all data passed between our System’s servers and browsers will remain private and secure.

Enfoglobe ystems use two-type encryption. First the application is encrypted by an SSL asymmetric exchange public key and then all exchanged data is encrypted by an SSL symmetric pre-shared key. This is a safe and fast method to encrypt data that is in transit. SSL guarantees encryption for each System domain.

Data Encryption and Decryption

Enfoglobe Systems also encrypt all User passwords, Customer/Patient Data Exports and all communication functions. Each User password is encrypted by an HMACSHA256 encryption and stored in an encrypted database. This method makes the passwords less likely to be intercepted by a third party.

All Client Data is encrypted on the Server as part of features provided by the Server Farm. The Server Farm uses a 256-bit Advanced Encryption Standard, with each encryption key also being encrypted. Keys are regularly rotated to prevent a key from being copied and used.

When a User account is created, the System generates a password and encrypts it. Passwords later changed by the account owner are also encrypted before being stored in the database. The database stores only the encrypted password version using a HMACSHA256 encryption key.

Unique User Identification

Enfoglobe Systems require all authorized Users to have a unique login and password. Systems automatically generate new User ids in the format: User’s first name, User’s surname, and User’s Database Identifier (Example, John Smith could be JohnSmith37).

Strong Passwords

A strong password is generated by the System during User account creation and is encrypted. The assword is stored in an encrypted form in the database. Passwords can be reset by the owner of the User account or an Enfoglobe System Administrator. Passwords must be  a minimum length of 8 characters, containing one capital letter, 1 number, and 1 special character. 

Blocking Concurrent Logins

Enfoglobe Systems prevent concurrent logins into the same account from multiple locations/devices at the same time.  This security feature prevents a login by an unauthorized person if, for example, theft occurred of user credentials and another person attempted to login

Disabled “remember me” Feature 

Enfoglobe Systems have the “remember me” login feature disabled by default in order to prevent persons who may gain unauthorized access to a User’s computer. 

Automatic Logoff

Enfoglobe Systems will log off the current user if the session is inactive for more than the Auto Logout Time set in the System. The default automatic logout time is set to 10 minutes. Auto Logout Time value can be changed according to the Client’s preference. When a user closes an active browser page without logging out from the system, the user will be immediately and automatically logged out.