Data Access & Control Policy
PRO-Webs has need to collect data from clients to perform services for their websites care, troubleshooting, development and support. The collection and storage of the data is outlined for security in the following policy.
DATA ACCESS CONTROL & POLICY
- Project data is considered both confidential and secured. Only necessary access is requested and assigned to only employees and insured contractors directly involved with the project/service.
- Access to the application for data collection, support, hosting and all PRO-Webs departments requires the user be logged in and requires a unique username and password for that user.
- All assigned employee data users will have an alphanumeric password of at least 8 characters.
- All assigned employee access to the data collection software credentials are changed every 40 days and only PRO-Webs employees & insured contractors shall have access.
- Project data is only maintained for the duration of the ACTIVE project plus 5 days. All inactive project data is purged after 5 days of a determination of completion or inactivity.
- Intruder detection is implemented on the data collection software & the offending user’s IP will be locked after 3 incorrect attempts.
- All data collection website/application related software is kept current to PCI/DSS standards at all times.
- The entire data collection site/application is protected with 256Bit private, domain validated COMODO SSL.
- The data collection system application is audited every 30 days for security.
HOSTED CLIENTS DATA ACCESS & CONTROL POLICY
- You are REQUIRED to use the helpdesk in order to receive hosting support via your BILLING account email address ONLY. Hosting issues sent via a guest ticket will be immediately discarded.
- We CANNOT provide access information for your hosted account to anyone but the account owner of record.
- If you need your hosting password reset you MUST use the helpdesk with the email address on your hosted account. You will need to give us your domain name, your full name and phone number in the ticket. You must be logged in to the helpdesk, guest tickets are unacceptable.
- We may require a PHONE CALL VERIFICATION at the phone number on file to provide BOTH username and password credentials for your hosted account. Â You must be logged in to the helpdesk, guest tickets are unacceptable.
- If you are brute force locked out you MUST use the helpdesk to ask for it to be cleared and you must provide your IP address in the ticket. You can get your IP address here. You must be logged in to the helpdesk, guest tickets are unacceptable.
- PCI issues require your report to be submitted in PDF format. Please update your ticket after creating it and click the “camera” to upload your report. You must be logged in to the helpdesk, guest tickets are unacceptable, please create an account. While we endeavor to support your PCI/DSS compliance efforts we cannot, under any circumstances negotiate or deal directly with your vendors
PRO-Webs, Inc NEVER stores credit card numbers anywhere, in any format digital or otherwise. Credit card numbers are entered by the client into our payment software and transmitted immediately with encryption to processor Authorize.net. Other payment options include off site payment forms such as Google Checkout and PayPal.
Last Updated 12/12/2022