iCOVER – Pioneers in Trustworthy All -in-one Background Screening & Compliance Solutions

In an era where trust is the foundation of every successful business, iCOVER emerges as the unrivaled guardian of reliability and security in the dynamic world of background screening and compliance. With two decades of unparalleled local expertise, we are more than just a service provider; we are your trusted companion on a journey through the realms of data security, compliance, and technological innovation. Join us on a remarkable expedition that defines us as global leaders in screening and compliance services.

---

The Fortress of Data Security

At iCOVER, we recognize that trust is the bedrock of background screening and compliance. Hence, we embark on a ceaseless quest to maintain an impregnable security fortress through regular audits and comprehensive assessment practices. Our unyielding commitment to robust data security is a testament to our proactive approach to shielding your data, ensuring its integrity remains unshakable.

---

iCOVER’s Data security overview : Comprehensive data security through a multi-faceted approach

Within the heart of iCOVER lies an intricate tapestry of data security, reliability, compliance, and internal IT controls, meticulously woven to protect personal and confidential information. This elaborate framework is a testament to our unwavering dedication to earning and maintaining the trust of our valued clients.

The Enchantment of Encryption

The saga begins with encryption—a powerful enchantment that safeguards data at rest and in transit:

Data at rest:

• Shielding data at its core with disk-level encryption across all servers, fortified with the robustness of AES256.
• Personal data is cocooned in encryption, a vigilant guardian, ensuring compliance with client data retention period requirements.

Data in transit:

• The journey of data is shielded with HTTPS-enforced web interface access, fortified with TLS1.2 or above.
• API access embraces the same encryption standards (via TLS1.2 or above), ensuring that data travels safely.

iCOVER’s Vigilant Guardians: Threat Detection & Penetration Testing

Remaining secure and compliant while navigating the ever-changing landscape of threats is our relentless pursuit. We stand out in the industry for our constant vigilance in detecting and mitigating potential threats, ensuring your data is always secure.

Crafting Security with Precision: Software Development, Configuration, BCP/DRP

Crafting change with precision, eliminating errors, and ensuring timely, high-quality outcomes are the keystones of our software development and infrastructure management. Our narrative unfolds:

• Software development processes are steeped in secure design principles, embracing the wisdom of OWASP coding practices. Rigorous testing and built-in security measures complete the foundation.
• Our infrastructure, guided by industry best practices and standards, is configured with meticulous care.
• A robust Disaster Recovery Program and backup strategies, accompanied by redundant data stores, stand as guardians of our operations.
• Our Business Continuity Plan covers all vital business lines, ensuring the show goes on even during the harshest storms.

The Guardians Within: End-User Protection & Employee Awareness

Our dedication to data security extends to guarding your business from within. Our cast of characters are the sentinels of your data:

• Corporate workstations, centrally managed and fortified with encryption and antivirus protection, stand guard.
• Software installations are regularly reviewed, safeguarding against vulnerabilities.
• A cybersecurity awareness program, offering a strong security culture through employee training and phishing simulations, weaves an unbreakable bond.
• A corporate password manager is the vault for our credentials, seamlessly integrated into daily business processes.
• Centralized document storage, complete with version tracking, audit trails, robust backup and recovery options, and stringent access controls, ensures your data is safe and scalable.

Data storage compliance and privacy

iCOVER’s commitment to data security is evident through its strict adherence to data security standards. Our commitment to your trust is evident through:

• ISO27001 certification of strategic locations in Bulgaria and India.
• The utilization of certified data center providers within the European Union to host our IT infrastructure.
• Unwavering alignment with relevant data protection regulations.

The Hero of Our Tale: IRIS

iCOVER’s screening automation platform – IRIS, helps you make informed, compliant hiring decisions by using advanced technology and built-in compliance tools, all backed by a dedicated support.

IRIS FEATURES

IRIS offers a symphony of features, optimizing your screening workflow across more than 200 countries and territories:

• Flexible and customizable, with the right integration and delivery options for your needs
• Scalable infrastructure to support your company’s growing workforce
• Fast API response times bring your essential data quickly
• Proactive updates and alerts on screening reports make the latest information easily accessible
• Tracks the status of ongoing background checks and securely stores the information of the completed ones
• Technical consulting, integrated support, and automatic platform updates
• Reliable service with 24/7 access to data

IRIS Access Control

Effortless access management and heightened security are the keys to our success:

• Role-Based Access Control (RBAC) applied via granular permissions assigned on permission role groups
• Automatic expiry of unused accounts

SECURE API INTEGRATION PRACTICES

• Robust authentication: using JSON Web Tokens (JWT) for secure authentication, ensuring that only authorized users can access our API endpoints.
• Regular penetration testing: conducting periodic penetration tests to identify and mitigate potential security vulnerabilities, ensuring the API remains resilient to attacks.
• Test coverage: maintaining comprehensive test coverage for our API codebase to validate functionality and security measures and catching issues early in the development process.
• Security code reviews: implementing rigorous code review processes to identify and rectify security flaws and vulnerabilities before they make it to production.
• Cloudflare protection: using Leverage Cloudflare’s industry-grade security features, such as DDoS protection, Web Application Firewall (WAF), and Content Delivery Network (CDN) for enhanced protection against various online threats.
• Data encryption: implementing strong encryption protocols (e.g., HTTPS) to secure data transmission between clients and the API, preventing eavesdropping and man-in-the-middle attacks.

---

Partnering with iCOVER

By partnering with iCOVER, you gain access to a new chapter of technology and services that redefine the background screening and compliance field. Our unwavering commitment to trust, reliability, and security stands as a foundation for your journey with us.

When you choose us, you choose a world of possibilities:

• An extensive global network of top-tier partners
• A one-stop-shop experience with customized solutions tailored to your unique needs
• Cutting-edge technology and tools for in-depth research and analysis
• Unmatched expertise and experience in risk management and compliance
• Swift and efficient turn-around times for time-sensitive decisions
• Multilingual capabilities, ensuring seamless international operations
• A company that is constantly innovating and investing in its technological product roadmap

Don’t miss this opportunity to take your business to the next level. Book your demo now and see how iCOVER’s screening and compliance solutions can elevate your organization’s trust, security, and success. Your journey to a brighter and more secure future begins with iCOVER!

November 2023