Data Security

At North American Recovery, security—physical, network, and data—is part of our core culture. We rigorously protect all data, including backups in case of natural disasters or system failures. Our facility uses coded key-fob locks on all external doors and has on-site security personnel, maintaining a medium-high security environment. We employ multiple layers of protection for client data. Access to our systems requires multiple passwords and is limited to authorized users. Remote access to our internal network is prohibited, making it inaccessible to outsiders.

Internally, every user has a unique login, with permissions tailored to their role. System software restricts access based on these credentials.

Our infrastructure includes regularly updated routers and firewalls, 128-bit encryption, and dedicated T1 lines for voice and data. We use redundant Direct Access Storage Devices (DASDs) and a dual backup system. Daily, weekly, monthly, and yearly backups are archived on a long-term schedule, with yearly backups kept indefinitely. Encryption is just one part of our layered security strategy. We also emphasize internal protection—recognizing that people are often the weakest link. That’s why our security culture relies heavily on awareness and education.

Employees receive ongoing training through monthly security modules tailored to general staff, managers, and IT personnel. Our Acceptable Use Policy (AUP)—covering email, passwords, privacy, client data, and device use—requires passing a written exam. No remote work or transfer of data via portable storage is allowed.

Security training is continuous and includes:

  • Clear policies for computer, email, and internet use

  • Best practices (e.g., avoid suspicious attachments, protect passwords)

  • Warnings about spam, phishing, spyware, and unauthorized downloads (a fireable offense)

  • Alerts about emerging threats and proper response protocols

  • Two-factor access and full-time security scanning on all devices

  • Education on internal risk awareness and peer accountability

  • Recognition for security-conscious behavior

Our multi-tiered approach ensures comprehensive protection for both our organization and our clients.