A secure loan origination software and background check system

When using using any of our ASP products, only you have access to your applicants' sensitive information. We combine innovative technology with practical planning to defend against security threats to this private information. Our approach safeguards data retrieval as well as application hosting and data storage. In order to provide our clients with secure access to their loan origination or background check application, we have built a system with features that go far beyond password protection.

Multiple credentials required to gain access to our loan origination software and background check system. Simply having a user-ID or a user-ID and password is not sufficient. In addition, we require our customers to maintain an active client ID. This provides us with another level of identification so that only authorized customers gain access to our loan origination software and background check system.

IP address restrictions.
Clients have the option to register the IP addresses of all computers that will be used to access our loan origination software and background check system. This precaution provides yet another layer of client identification. Unauthorized IP addresses are not able to access our system.

Time restrictions.
Client-specific (optional) time of day restrictions give access to our system during authorized hours only. Time restrictions help avoid after-hours attempts at intrusion and unauthorized employee access to our loan origination software and background check system.

Limit user access by function.
We have incorporated restrictions to user access within each of our applications - such as general user, manager, and administrator - to allow you to restrict an individual user's access to specific areas of the software. Each software module exists in total isolation which allows you to define a user's access based upon responsibilities. For example, it is possible to have an administrator for resetting user passwords, but restrict this user from access to consumer confidential information.

Automatic logout.
Users who remain inactive are automatically disconnected from our loan origination software and background check system based on pre-set time intervals set by administrators. This prevents client-site security mishaps, where often, users leave for the day, and someone else can gain access through their terminal.

Data encryption.
In addition to using 128 bit SSL for browser communication security, sensitive data and consumer information is stored in an encrypted format within our database. Access to sensitive data by TCI employees requires client authorization.

Certified by an Industry Leader.
TCI has achieved SiteSecure Certification from Cybertrust, the world's leading information security specialist. Through our SiteSecure Certification, TCI is proud to provide all of our customers and partners with the assurance that our information security controls, policies and procedures have been examined, measured and validated by an industry leader against a stringent set of security requirements. We are committed to achieving and maintaining the highest levels of information security.

Data storage & application hosting security.
Our dedicated servers are housed at Verizon Business, a Tier 1 managed hosting provider with industry leading expertise and experience. Verizon Business has achieved the SAS 70 Type II certification and SysTrust Certification. Verizon Business employs a security team whose charter is to protect the integrity and confidentiality of our infrastructure, applications, and data. Our internal attention to security matters is complemented by Verizon Business' comprehensive security program, which includes:

24/7/365 monitoring.
The Verizon Business-managed services team monitors the stability and performance of:

• Environmental issues, including power, temperature and humidity;
• Network connectivity to the Internet (i.e. Front End), and to our Credit Bureaus (i.e. Back End);
• Hardware usage and failure, including CPU utilization, hard drive utilization, memory utilization, and equipment components (e.g. cards, drivers, memory, processors);
• Software functioning, including web servers, application servers and database servers.

Click here to read a recent news release about Verizon Business, TCI's hosting provider for all of the ASP applications.

Comprehensive physical security.
An on-site security staff safeguards the Verizon Business hosting facility and all assets housed within.

Safeguards against natural disasters, hardware downtime and power interruptions.
Verizon Business servers are connected to two independent power networks including redundant power outlets and power distribution systems (i.e. uninterruptible power supplies, conditioners and distribution units) that are fed by two separate power grids and supplied by separate utility companies.

Digital certificate authentification.
Our SSL certificates are guaranteed to be authentic by VeriSign, which provides customers with the confidence that they are interacting with our secure websites.

High availability architecture with mirrored data storage.
In the event of an outage, Verizon Business provides high N+1 redundancy to minimize downtime. Specific features include redundant load balancers, firewalls, application and database servers with redundant components.

Private connections to all credit bureaus.
We have dedicated private connections to all credit bureaus to safeguard the transmission of data. In addition, multiple connections to our credit bureaus via separate carriers increase connectivity.

Click here to email us a request for a copy of our security policy.

See how our loan origination software and background check solutions can help your business process credit checks, employment screenings, tenant screenings and more. Read about our nine ASP-based products and then contact TCI for a free demo. Email us or call us at (800) 841-9950.