Compliance & Security

Finance System, Inc. employs stringent, HIPAA compliant data protection policies to effectively safeguard your consumers’ information.

FDCPA

Congress passed the Fair Debt Collection Practices Act, often referred to as the FDCPA, in response to abusive conduct by collection agencies, and concern that the abuses were causing an increase in the filings of personal bankruptcies. The purpose of the act is to provide guidelines for collection agencies, which are seeking to collect legitimate debts, while providing protection and remedies for debtors.

HIPAA

HIPAA is applicable to protected health information. Protected health information is any oral or written information about a patient that relates to the physical or mental condition of a patient. HIPAA applies to covered entities, which are statutorily defined as those entities, which receive, use or are exposed to protected, private patient health information. In order to comply with HIPAA, we have provided the necessary measures to protect our patients’ health information.

FCRA

The Fair Credit Reporting Act, FCRA, is a federal law that details how consumer credit information can be collected, given out, and used. Under the FCRA, consumers have a right to view information in their credit file and dispute inaccurate information.

Finance System, Inc. is committed to keeping your privacy and data safe. We are proud to be SOC 2 TYPE II certified.

Developed by the American Institute of CPAs (AICPA), the Service Organization Control 2 is an auditing procedure that ensures we, as service providers, securely manage your data to protect the interests of your organization and the privacy of its clients. The report is based on five trust service principles: security, availability, processing integrity, confidentiality and privacy. The Type II report details the operational effectiveness of a service organization’s system.

0 %

With clients from coast to coast, we are 100% compliant with state licenses, along with following closely to the laws in each state we service, to give you the peace of mind that your accounts are being handled to the highest standard.

Disaster Preparedness

Incident response plan
Dedicated employee disaster recovery facility
Ability to operate at full capacity in 48 hours
Crisis response team in place
Remote dual data backup
Full battery and emergency generator system
Remote survivable phone switches
Access to complete inbound & outbound calling capacity
On-Site dialer backup to off-site cloud operation system

Security

Firewalls
128 Bit data encryption
Collector call recording
Employee station authentication
Virus protection
HIPAA collector training and accountability systems
On-site third-party document destruction
Off-site secure water/fire proof backup clone operation