Privacy, Security & Legal Compliance

Privacy & Data Protection

We implement administrative, technical, and organizational safeguards to protect personal, confidential, and proprietary information against unauthorized access, disclosure, alteration, or loss. Access to client information is granted only to authorized personnel based on the principle of least privilege and legitimate business need.

For healthcare-related projects, EVERA operates using HIPAA-aligned security and privacy practices. Our procedures and operational controls are designed to support clients that require HIPAA-aligned operations, including the secure handling of Protected Health Information (PHI) where contractually applicable.

Legal & Employment Compliance

EVERA conducts its operations in accordance with applicable local and international laws governing employment, privacy, data protection, and commercial services.

All employment relationships are administered in compliance with the labor laws and regulations of the jurisdictions in which our personnel are engaged, including the Ministry of Labor (Ministerio de Trabajo) of the Dominican Republic where applicable. Client agreements are structured to comply with applicable local and international legal, contractual, and data protection requirements.

Information Security Program

Our information security framework includes documented policies, procedures, and operational controls, including but not limited to:

• Remote Work Security Policy
• Acceptable Use Policy
• Clean Desk & Clean Screen Policy (applicable to both office and remote work environments)
• Information Security Incident Response Plan
• Data Breach Notification Procedure
• Background Check Policy for personnel, where permitted by applicable law
• Secure Onboarding & Offboarding Security Checklist
• Agent Security Training & Certification Records
• Confidentiality & Non-Disclosure Agreements
• Role-Based Access Controls
• Secure Password & Authentication Standards
• Continuous Security Awareness Training
• Ongoing monitoring and continuous process improvement

Confidentiality

Every member of the EVERA team is expected to uphold the highest standards of confidentiality. Personnel are trained to handle client information responsibly and are required to comply with internal security policies, confidentiality agreements, client-specific requirements, and applicable privacy regulations.

Continuous Improvement

Security and compliance are continuous processes. EVERA regularly reviews and updates its policies, procedures, and operational controls to align with evolving regulations, industry best practices, technological advancements, and client expectations.

Healthcare Services Disclaimer

EVERA provides secure operational services using HIPAA-aligned privacy and security practices. When supporting healthcare organizations, our policies, procedures, and operational controls are designed to help clients meet their contractual privacy and security requirements. Clients remain responsible for determining the regulatory obligations applicable to their organization and the services they engage us to perform.