Security (cont.)

Physical Security: vmcSelect is located within a secure facility at our headquarters in Glen Burnie, Maryland. All server equipment is located at our secure SAS70 II / PCI-DSS compliant Tide Point datacenter in downtown Baltimore, Maryland. Both facilities are monitored by security, network and systems engineers 24x7x365.

Firewall: Our servers, workstations and networks are protected by redundant Checkpoint MTU-1 firewall appliances using IPS protection and all live traffic and daily logs are monitored to avoid potential attempts to breach security.

We also offer clients point-to-point VPN connections, adding yet another layer of security integration.

Lender/Vendor Access: Access to the secure areas of our site require a username and password. Once the user is validated, session based authentication is used to secure the encrypted session. The user is logged out automatically after a set period of time and the session key destroyed. If the browser window is closed for any reason, the session key is destroyed and any attempt to access the site will require the user to present their credentials once again.

Once authenticated the user is redirected to their specific datastore based on an administrative profile maintained by vmcSelect staff. The credentials are then passed to the Access Control List (ACL) of the datastore for validation. The ACL also controls access to the documents contained in the datastore as well as the fields on the documents.

No Sharing: Every lender and vendor have their own private datastore that only they have access to. No datastore in the system is ever shared.