SECURITY INFORMATION

Welcome to the Spectra Laboratories web site. This description of our Security Policy and Technology covers Spectra Laboratories' Averity ASP product and services accessible after registering on this site and accepting the Terms of Use. By using the Spectra Laboratories site, you understand and agree to the terms of this Security Policy.

Authorization and Access Control

Averity maintains several levels of authorized access to medical, financial and other personal information. Access to medical practice information is restricted to authorized personnel in that medical practice.

Each Averity account is protected by a personal username and password. Account information cannot be accessed without the proper username and password combination. Users are responsible for maintaining their passwords private.

Each user is assigned a combination of privileges, which determine the scope of user access to sensitive information. Examples of privileges include ability to view reports, order tests and create plans.

Authentication

Proper identification of users prior to authorizing access is critical. Procedures for identification of users include personal contact and verification of providers' licensing documents.

Accountability

User access to account information is logged and monitored via security audits. In this way a trail record of user activity is maintained, including all access to sensitive information.

Encryption

All information transmitted via the Internet is encrypted using Secure Socket Layer (SSL) protocol with support for up to 128-bit keys.

Physical Security

Our servers are located at Conxion's enterprise-level data center. Conxion is a leading provider of managed-hosting services. At Conxion, security measures include controlled access to the building through restricted floor access, motion sensors and surveillance cameras. Redundant Internet paths owned by Conxion ensure high availability of service.

Changes to this Security Policy

Spectra Laboratories may amend this policy from time to time. If we make any substantial changes we will notify you either by e-mail or by posting an announcement with any significant changes on our web site. You should also check this posted Security Policy for any future changes. If you do not agree to the terms of this Privacy Policy or any revised policy, please exit the site immediately.