EternaTrust Insurance Group LLC (“EternaTrust,” “we,” “our”) is committed to maintaining the highest level of security and confidentiality for personal, financial, and health-related information shared with us. This Data Security & Cybersecurity Statement outlines the safeguards we employ in accordance with:

The Gramm-Leach-Bliley Act (GLBA)
The NY SHIELD Act
State Department of Insurance requirements
HIPAA-aligned best practices
Industry cybersecurity standards

1Our Security Commitment

We take data security seriously and have implemented strong administrative, technical, and physical measures to:

Prevent unauthorized access
Protect data integrity
Ensure secure transmission
Detect and respond to threats
Maintain business continuity
Comply with regulatory requirements

Security is an ongoing priority in every part of our business.

2Types of Information We Protect

Personal Identifiers — name, address, contact details
Financial Information (GLBA Protected)
Sensitive Personal Information — health disclosures, beneficiaries
Application & Policy Data
Communication Records — calls, texts, emails, chat logs
Technical & IP Data — device, browser, logs

3Security Safeguards (Administrative, Technical & Physical Controls)

A. Administrative Safeguards

Mandatory staff training on privacy & data protection
Role-based access control policies
Signed confidentiality agreements
Compliance monitoring
Vendor due diligence & security reviews
Regular internal audits
Incident response procedures
Data retention & destruction policies

B. Technical Safeguards

Encryption in transit (SSL/TLS)
Encryption at rest
Multi-factor authentication (MFA)
Firewalls & intrusion prevention systems
Secure API integrations
Anti-malware and endpoint protection
Regular penetration testing
Automated system monitoring
Backup & disaster recovery protocols
Password complexity standards

C. Physical Safeguards

Secure office locations
Restricted access to sensitive areas
Security cameras & monitoring
Locked server & networking infrastructure
Secure disposal of documents

4EternaSync Platform Security

Role-based access controls
Unique user logins
Activity logging & audit trails
Automatic session timeouts
Encrypted client records
Restriction of unauthorized data export
Continuous monitoring for unusual activity

Unauthorized use or sharing of EternaSync access is strictly prohibited.

5Data Transmission Security

HTTPS encryption
Secure socket layer (SSL) protocols
Encrypted REST communication
Verified security certificates

These safeguards help ensure data cannot be intercepted or altered during transmission.

6Vendor & Third-Party Security

We work only with trusted vendors who:

Follow industry-standard security practices
Sign confidentiality and data protection agreements
Use information only for operational needs
Undergo security and compliance assessments

We do not share data with vendors that fail to meet required standards.

7Identity Verification & Fraud Prevention

To protect consumers, we may use:

Identity verification technologies
Public record checks
Phone validation tools
Fraud-detection algorithms
Carrier underwriting checks

Suspicious or fraudulent activity may result in account suspension, carrier notification, or reporting to the state Department of Insurance.

8Breach Notification Policy

In the event of a data breach:

Affected individuals will be notified promptly
State and federal agencies will be notified as required
NY SHIELD Act & DOI requirements will be followed
Corrective action will be taken
We will cooperate fully with regulators

9User Responsibilities

Using secure devices
Keeping login credentials safe
Not sharing account access
Not transmitting sensitive information over unsecured networks
Reporting suspicious activity

10Limitations of Security

While we maintain strong safeguards, no system is completely immune to cyberattacks, unauthorized access attempts, or system vulnerabilities. We commit to taking appropriate action in response to any such threats.

11Updates to This Security Statement

We may update this Statement periodically to reflect new safeguards, emerging threats, technology changes, and updated legal requirements.

12Contact Information

For questions about data security or to report potential concerns:

EternaTrust Insurance Group LLC

Security Office:

Contact Security Office

Data Security & Cybersecurity Statement

(Security Disclosure)