Security

How secure is the DISAScreen platform?

DISAScreen prioritizes strong security measures to protect your data and give you peace of mind.


How does DISA protect consumer personally identifiable information (PII)?

DISA masks, or truncates, all or part of PII in our system, including SSNs, DOBs, and DLNs. This means when you are accessing our system and any reports from our system, you will only see the following: The last four digits of SSNs, month, and date of birth (year is truncated), and completely masked DLNs.


What are the retention periods?

Reports and records are divided into two categories – Records Owned by DISA and License or Records Owned by the Customer. Please see the details below regarding details and access. Please see this article on data export options.

Records Owned by DISA and Licensed to Customers.

 » Consumer files, the consumer information contained therein, and the consumer reports issued therefrom, are owned by DISA.  DISA provides a non-exclusive, limited, revocable license to its customers to use its consumer reports for the permissible purpose specified in the Master Services Agreement and related certifications.  DISA currently retains its consumer files for a period of not less than five years.  In certain situations, DISA will retain its consumer files indefinitely.  DISA encourages its customers to download and maintain copies of consumer reports in accordance with their own retention policies and practices.  During the active contract period, DISA will permit customers to access and obtain copies of previously furnished consumer reports, subject to DISA’s deletion schedule.

Records Owned by Customer 

 » Electronic Forms I-9, E-Verify case files, and U.S. DOT records are owned by the customer (“Customer Records”).  Please be aware that DISA does not generally provide hosting as a service; however, DISA currently maintains copies of these Customer Records for a period of not less than five years.  DISA encourages customers to download and store copies of Customer Records as they are received.  As a courtesy, during the active contract period, DISA will permit customers to access copies of Customer Records maintained by DISA, subject to DISA’s deletion schedule.

Retention Periods Subject to Change

 » The foregoing retention periods are established for internal purposes only and they are subject to change with or without notice, except that in no event will DISA reduce its retention schedule to a period that is shorter than three years.