Security Notice

Effective Date: June 19, 2025

At 4FiMD, LLC and its subsidiaries, the confidentiality, integrity, and availability of your data are foundational to our operations. Our Information Security Policy is designed to protect sensitive customer and partner data in accordance with applicable federal and state laws, industry standards, and regulatory frameworks.

Our Security Commitments

We have implemented robust, layered security controls based on best practices and financial regulatory guidance, including GLBA, FCRA, NIST, ISO/IEC 27001, and SOC 2.

Key protections include:

• Data Encryption
  All sensitive data is encrypted in transit (TLS 1.2+) and at rest (AES‑256). Third-party integrations and communications occur over secure, authenticated channels.

• Access Control & Authentication
  We enforce strict role-based access across all platforms. Multi-Factor Authentication (MFA) is required for internal and vendor access, with access rights reviewed quarterly and immediately revoked upon employee or vendor offboarding.

• Endpoint & Device Security
  All company and personal devices used for work are monitored and secured using antivirus, firewall, mobile device management (MDM), and Zero Trust access architecture.

• Monitoring & Incident Response
  Our systems are continuously monitored for unusual activity. We maintain a formal Incident Response Plan that ensures any high-severity security incidents are identified, contained, and reported—internally and externally—within 72 hours as required.

• Third-Party Risk Management
  All vendors undergo due diligence and are subject to contractually required security controls, including breach notification obligations and secure data handling procedures.

How We Protect You

From secure portals to secure data storage, every system we operate is governed by internal policies that prioritize data integrity and operational resilience. We review these policies annually and whenever a significant technical or regulatory change occurs.

Reporting Concerns

If you believe your information may have been compromised or you have a security-related concern, please contact us immediately:

Email: info@4fimd.com
Phone: (866) 544‑3463