Your Security is Our Priority
At EMSQUIZ, we take the security and privacy of your personal information extremely seriously. We implement comprehensive security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.
This page explains the security practices we employ and the standards we comply with to ensure your information remains safe and confidential.
Our Security Measures
All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.3 protocol.
User data is encrypted at rest using AES-256 encryption to prevent unauthorized access to stored information.
We implement secure password hashing, multi-factor authentication options, and session management best practices.
Role-based access control (RBAC) ensures users only access data and features appropriate to their account level.
Continuous monitoring for suspicious activities, unauthorized access attempts, and potential security threats.
We maintain a rapid incident response team and established protocols to address any security concerns immediately.
Compliance & Standards
We comply with the General Data Protection Regulation for users in the EU and globally.
California Consumer Privacy Act requirements are fully implemented for California residents.
While not a covered entity, we implement HIPAA-like security controls where applicable.
Our security controls are audited annually to ensure compliance with SOC 2 standards.
We follow ISO/IEC 27001 information security management system standards.
Payment processing complies with PCI Data Security Standard requirements.
Security Best Practices
Password Requirements
- Minimum 8 characters with mixed case, numbers, and special characters
- Passwords are hashed using bcrypt with salt before storage
- Never stored in plain text
- Regular password expiration reminders (optional for users)
In Transit
All communication between your browser and our servers uses TLS 1.3 encryption. We maintain an A+ rating on SSL Labs tests.
At Rest
Sensitive data including user profiles, quiz scores, and personal information are encrypted using AES-256 encryption at our data centers.
- Role-based access control (RBAC) for different user types (Student, Instructor, Admin)
- Session management with automatic timeout after periods of inactivity
- Secure password reset process with email verification
- Account lockout after multiple failed login attempts
We conduct regular security assessments including:
- Quarterly penetration testing by independent security firms
- Monthly vulnerability scans and assessments
- Code reviews and security testing during development
- Annual third-party security audits
- Continuous monitoring using advanced threat detection tools
In the unlikely event of a security incident, we follow a documented incident response process:
- Immediate isolation of affected systems
- Investigation by our security team and external experts if necessary
- Notification to affected users within 24-48 hours
- Regular communication about remediation efforts
- Post-incident analysis to prevent future occurrences
We carefully vet and monitor all third-party vendors and service providers:
- Vendor security assessments before integration
- Data processing agreements with all vendors
- Regular compliance reviews of third-party services
- Strict data minimization with third parties
- Clear data deletion policies with vendors
Your Security Responsibilities
- Use a strong, unique password that you do not share with anyone
- Never share your login credentials or account access with others
- Log out when using shared or public computers
- Regularly review your account activity and login history
- Enable security notifications and alerts
- Update your password regularly (at least every 90 days)
- Use the most current version of your web browser
- Install and maintain antivirus and anti-malware software on your devices
Security Concerns?
If you discover a security vulnerability or have security concerns about EMTQUIZ, please report it to our security team immediately. We take all security reports seriously and will respond promptly.
Email: security@emsquiz.com
Phone: +1 (555) 123-4567 (Ext. Security)
Please do not disclose security vulnerabilities publicly until we have had time to address them.
Last Updated: March 2026
Security practices are reviewed and updated regularly to address emerging threats and best practices.