Thread and isolved believe in putting people and their privacy first. We value our customers’ privacy and trust and work hard to handle your data and the integrity of it with absolute care. We understand what’s at stake and will always operate in a highly secure and professional manner when handling your information.

isolved understands our responsibility to safeguard personally identifiable information (PII), protected health information (PHI) and other nonpublic personal or financial information of our customers, their employees, brokers and participants from any unauthorized access or use. We take this responsibility seriously and we will never knowingly use customer data for purposes, including the sale of data to third parties, other than those clearly defined within our privacy policy and agreements for any reason, except as required by law.

As a third-party administrator, isolved maintains limited access to the data we process on your behalf in connection with our products and services including isolved People Cloud™, and we do not access your data for any reasons unrelated to the operation and maintenance of our products and services. Instead, we provide our customers with the necessary control over their own data, including the ability to access it in order to meet data privacy and compliance attestation requirements.

isolved and isolved People Cloud – running on Microsoft Azure – maintain the highest industry standards and best practices, taking into account privacy laws at the Federal (e.g., HIPAA as amended by HITECH) and state (e.g., California Privacy Rights Act or “CPRA”) levels.

The level of trust we enjoy from our customers today comes from many years of safely and securely providing our products and services and our ongoing commitment to maintaining and continuously improving our privacy controls. Technologies continue to change such as with touch-based technology.

Touch-based technology privacy statement:

isolved Time Solutions utilize timeclocks that may include touchpads. The touch-based technology utilized through touchpads does not capture fingerprints. isolved does not capture, store, possess, or use fingerprint data. isolved complies with applicable retention and destruction requirements as defined by law. Read the full privacy and policy statement

The isolved privacy controls and processes, which cover protected data received in any tangible and/or digital medium by isolved are recorded within our Privacy Policy.

The danger of fraud is growing, and its impact to a company’s revenue and reputation and an individual’s livelihood can be significant, even devastating.

As criminals become more innovative and determined in their efforts to infiltrate infrastructure and systems in order to steal confidential information and detrimentally disrupt services, isolved will also continue to work tirelessly to reduce fraud risk at all points in our product and service lifecycles.

We maintain strong controls, state-of-the-art monitoring mechanisms and savvy financial processing expertise to detect threats and contain fraud risk. By identifying evolving fraud trends, stopping known exploits, closing gaps and reducing harmful financial impacts, we help keep customers safe while using our systems.

And as fraud methods continue to evolve in complexity, from credit card and serial number issues to counterfeit sales or illegitimate payments, we use sophisticated monitoring to minimize the impacts of fraud on our business and most importantly on our customers.

Payments Fraud:

As incidents of cyber fraud continue to grow, there are precautions you can take and controls you can set to help you avoid loss. Payment fraud activity is on the rise.

• Never respond to pop-ups or unsolicited phone calls asking you to provide personal information or to submit or re-submit your login and password information.
• Never allow multiple people to use the same computer to process a transaction.
• Never continue an online session that makes you or any of your colleagues feel uncomfortable or unsure, discontinue the session immediately.
• Never provide sensitive non-public information within an email.
• Validate every and all payment requests received via email – ideally verifying the sender’s detail via phone call or in person before proceeding.
• Review email and domain names closely for accuracy and to help avoid phishing or BEC schemes. Thread emails will always follow the threadhcm.com structure. isolved emails will always follow the @isolvedhcm.com structure.
• Regularly review and confirm the entitlements and systems access of your employees.

Phishing

Phishing is when an individual or group of people receives a fraudulent email or text message from scammers that appears to be sent by a trusted person in order to trick them into giving up personal information, which is then stolen. They may try to steal your passwords, account numbers, and social security number in order to fraudulently access your email, bank or other accounts. The FBI’s Internet Crime Compliant Center reports that people lose around $60M to phishing schemes a year.

This is because phishing attempts can be very convincing as the website requesting your information can often seem very similar to a legitimate vendor’s site. There are some best practices you can adopt to prevent you or your employees from becoming victims to this type of attack.

• Validate the sender: When you receive emails, ensure that the address ends in a recognizable and trusted domain.
• Validate the URL: When entering your username and password, check the URL in the browser to ensure that it is indeed the correct address and that it is protected with “HTTPS” at the front of the URL.
• Look for inconsistencies: Oftentimes, phishing attempts can contain subtle differences in the design of the site. Be sensitive to nuances such as misspellings or poor graphics.
• Look for threats: Phishing attempts often warn of bad consequences if an action is not taken immediately or within a certain period time.
• Enable Multi-Factor Authentication: Multi-factor authentication (MFA) is an additional and significantly effective security measure that requires a “second factor” such as a secure code to authenticate.
• Ensure a strong password: Your password should include a combination of lower and upper-case characters, numbers and other symbols.
• It is important to note that isolved will never request that your username or password be sent via email.

isolved People Cloud utilizes MFA as an added protection when signing in. Our applications additionally generate notifications for high-risk changes like direct deposit changes or account lockouts.

Phishing is covered under various state laws, and there are broader federal criminal laws that apply to phishing and other identity theft crimes.

If you or your employees have received a suspicious email, you should inform your IT/IS personnel and delete it immediately. If you or your employees have entered information such as username, password, or other confidential information into a suspicious site, we recommend that the password for the account is changed immediately.