Security

Mail-Gard is proud to provide our customers with highest level of security practices in the industry. We are the only provider that meets the requirements for Level 2 compliance of the Payment Card Industry(PCI) Data Security Standard. The result of a collaboration between Visa and MasterCard to create common industry security requirements and adopted in 2004, the PCI Data Security Standard calls for secure networks, vulnerability management programs, strong access-control measures, regular network monitoring and testing; and stringent information security policies.

As a PCI Certified Level 2 service provider, Mail-Gard was required to be validated for compliance by both a qualified security assessor and an approved scanning vendor. Validation involved identifying and correcting vulnerabilities to maintain appropriate levels of information security. Levels of compliance are based on volume of transactions, potential risk and exposure introduced into the payment system.

Crimson Security, Hauppauge, NY, a leading provider of information security and compliance management solutions, conducted the PCI security audit and validated Mail-Gard as a Level 2 service provider. Qualys, Inc. served as the PCI approved scanning vendor.

Facility Controls

Mail-Gard is committed to ensuring a secure environment for its employees, visitors and customers. To that end, the following security measures are in place at all company facilities with respect to:

• Facility access
• Visitor and delivery security
• Customer data protection and ‘clean desk’
• Employee personnel records (HIPAA)
• Employee screening
• Production Facility Controls
• Process Controls
• Quality control