We received our updated SAS 70 Type II report today. I can now get this out to the banks and credit unions who host their mortgage software with us. Each year banking regulators come into their offices to check on the processes that are in place to protect client information. Other than a mortgage loan document I honestly don't know of a single document that contains more sensitive personal data on it. Banking regulators want to make sure that data is safe and secure. ABT has taken on the task of securing this certification ourselves.
We do not rely on our data centers. We engage a 3rd party auditing company who comes in and reviews our processes and environment. If a process does not hold up an exception report is created listing the items that need "fixing".