WE'VE GOT ENROLLMENT LOCKED UP.

This website is accessed over the public Internet and your connection to this website is completely encrypted and secure. We have also implemented an extensive range of measures to ensure the security of the data entrusted to us by customers.

• Infrastructure – redundant and fault-tolerant servers, multiple data centers, battery and diesel generator backup power sources, multiple network connections, and fire suppression

• Technology – secure data encryption with, intrusion prevention, firewalls, backups, server hardening, routine security updates, vulnerability and anti-virus scanning, penetration testing, and e-mail encryption

• Secure facilities – biometric locks, on-site security, and video monitoring

• Security-aware company culture – security and privacy training, individual acknowledgement, and frequent password changes

• Business process – code reviews, testing, release planning, need-to-know access, and data disposal

• Internal Controls – ensure that sensitive data is adequately protected and reduces the risk of compromise cause by error, accident, natural disasters or malicious actions

While our security measures are extensive, you should always make sure that you are accessing the website via a secure connection and that you never transmit files you download from the website over an unsecured connection.

HTTPS

HTTPS (the Hyper Text Transfer Protocol over SSL) is the method in which your web browser uses to connect to the website. SSL delivers server authentication and data integrity using a digital certificate issued by a trusted certificate authority. The digital certificate is used to verify the connection between the server's public key and the server's identity. This means that when you connect with the website, you are assured that the server is not sponsored by an imposter.

Communication via HTTPS is secured using an advanced encryption algorithm which prevents tampering and eavesdropping. Depending on what web browser you use, you may be able to request a Security Report which describes how secure the connection is.

You can tell whether a document comes from a secure server by looking at the location (URL) field. If the URL begins with https:// (instead of http://), the document comes from a secure server. Your web browser will notify you if there is a problem with the website certificate. If your browser notifies you that there is a problem with the website certificate, you should not log onto the site because your connection to the site will not be secure.

Infrastructure

The servers that host the website reside in separate data centers in the United States. To reduce the risk of both data centers being impacted by the same catastrophic event, the data centers are located hundreds of miles apart, are connected to different network providers, and are powered by separate power grids. Service at one data center can be transferred in minutes to the other data center, if required.

These the data centers provide extensive security measures to protect access to the servers, including:

• Man traps and biometric locks, providing two- factor authentication

• 24-hour on-site security with escorted access

• Security cameras with digital recording and storage

• Sign in/sign out for all individuals

• Locked cabinets housing servers

The facilities also provide extensive on-site support to ensure the continuous operation and high availability.

• 24-hr. remote hands support

• Battery backup

• Diesel generator backup

• Fire suppression

Some information sent you by the website may be delivered by a Content Delivery Network ("CDN"). The CDN is used to distribute some web page assets, such as images, videos, style sheets, and script libraries through local servers co-located with various Internet providers. By keeping local copies of these assets, the CDN can deliver them to your web browser directly, therefore reducing Internet traffic. For security reasons, your personal information is never sent over the CDN.

Backups

In addition to data replication between the primary and secondary data centers, customer information is protected by frequent backups. At each facility, we have deployed dedicated archive servers that store backups for all customer databases. These backups are automatically copied from one data center to the other continuously. Backups are tested frequently to ensure that the backup files are valid.

For each client database, we retain:

• Incremental backups every few minutes for two weeks

• Full backups every week for two months

• At least one full backup each month for an entire year

All backups are compressed and encrypted using a symmetrical encryption algorithm known as the Advanced Encryption Standard ("AES"), it is widely considered to be among the most secure types of encryption and was adopted by both the U.S. and Canadian governments.

Technical Safeguards

We have implemented extensive technical safeguards to assure network and host security and to manage server vulnerability.

Safeguards include:

• DMZ – The most accessible network zone, which houses the servers that interact directly with the Internet

• Firewalls – dedicated rules-based security appliances that regulate the flow of information to and from the DMZ

• A "defense in depth" security control method in which multiple layers of defense prevent direct attacks against critical systems

• IDPS’s (Intrusion Detection and Prevention Systems) – appliances that detect attacks against the computer network

• Server hardening – disabling services that are not needed on the server and restricting the ways in which the server can communicate with the network

• Vulnerability management – systematically reviewing, testing, and deploying operating system patches as they become available

• Anti-virus and anti-spyware scanning on servers along with employee workstations

We perform vulnerability scans each and every month in order to validate the security measures.

Secure Coding Practices

System security also relies heavily on managing the software development life cycle (SDLC) effectively. Each and every phase of the SDLC includes certain security tasks to ensure that security is an integral part of this process. The SDLC requires that:

• The impact on security of each change is considered.

• Security patches and software configuration changes are adequately tested.

• Production and test environments are separated, with sufficient access controls in each environment.

• The duties of personnel assigned to test and production environments are separated sufficiently.

• Production data is not used for testing or development.

• User inputs are validated to prevent system vulnerabilities.

• Errors are handled properly.

• Role-based access controls are enforced consistently.

• Communications are secure.

• Cryptography is applied to protect sensitive data, where and when appropriate.

• Code changes are subjected to reviews only by knowledgeable personnel.

• Automated tools are being used regularly to detect vulnerabilities.

The website provides access to enroll in benefits that are provided by your employer or group. This site keeps track of personal information required for benefit enrollments. This Terms of Use Agreement (the “Agreement”) encompasses two important parts:

• Consent to Enroll Electronically a statement on your part allowing the general use of electronic records and the general use of electronic signatures.

• Terms and Conditions a legalized notice which describes certain conditions of use and limitations on the site sponsor’s liability.

Please review the Agreement carefully prior to using the website.

The website is owned and operated by Innovative Enrollment Solutions LLC, a Rhode Island corporation (herein referred to as the “Sponsor”). By using the website, software associated with the website, the services, electronic documentation, media, printed material, and related materials (the “Product”), you will be accepting the terms of this Agreement.If you’re not willing to abide by the terms of this Agreement, you may not access or use the Product. Your continued use of the Product acknowledges that you’ve read, understand, and accept the terms and conditions in this Agreement. This represents the entire agreement concerning the Product between you and the Sponsor, it supersedes any prior proposal, representation, or understanding between the parties.

The permitted use of your personal information is limited and set forth in the Privacy Policy. As described in the Security Information, your personal information is extensively protected by technological, physical, and organizational safeguards.

Consent to Enroll Electronically

This is an electronic enrollment for personal insurance coverage which uses electronic records, transactions, and signatures. By completing this electronic enrollment process, you understand and are consenting to the terms and conditions of the insurance policies for which you are enrolling and are adopting this electronic enrollment process with the intent that completing such process will serve as your electronic signature.

By implementing your user ID and password (or Personal Identification Number) you agree to conduct this transaction by electronic means and understand that this transaction will be submitted electronically. Your electronic signature is legally binding and enforceable as if you had signed on paper.

Following the enrollment, the companies that administer your coverage may deliver your insurance policies or certificates to you by mail, electronic mail, or through the Internet.

The company may or may not offer access to certain electronic records of your enrollment through the Internet.

Terms and Conditions

In relation to an application for insurance, by using the Product you agree with the following Terms and Conditions (the ''Terms'') without limitation or qualification. Please read these Terms and Conditions carefully before using the Product. If these Terms and Conditions are not acceptable to you, then you are not granted permission to use this Web site and must exit this Web site immediately. The Sponsor reserves the rights to revise these Terms and Conditions, which you will be bound to, and will inform you with regards to any revisions.

Disclaimer

To the maximum extent permitted, the Product is provided “as is” and excludes warranties of any kind, expressed or implied. The Sponsor, its officers, directors, employees, and agents (collectively “Representatives”) and suppliers disclaims any and all warranties. This includes and is not limited to implied warranties of merchantability and fitness for a particular purpose.

Neither the Sponsor, its Representatives, nor suppliers warrant that the Product will be uninterrupted or error-free. Also, that the Product is free of defects, that defects will be corrected, or that they will bear the cost, in whole or in part, for correcting any defects.

The Sponsor does not maintain any websites the Product may be linked to. Neither the Sponsor nor its representatives or suppliers, are responsible for the contents of other such websites. The inclusion of any link to such websites does not imply approval of or endorsement by the Sponsor, its Representatives, or suppliers.

The Sponsor and/or its representatives or suppliers, are not responsible for any contents associated with other such websites. The inclusion of all links to these websites in no manner implies approval of or any endorsement by the Sponsor, its Representatives, or suppliers.

Limitation of Liability

The Sponsor, or its Representatives or suppliers, under no circumstances shall be liable to you for any kind of direct, incidental, consequential, indirect, or punitive damages resulting from the use or inability to use, the Product, even after being advised of the possibility of these damages.

Trademarks and Copyrights

Unless otherwise stated, any and all trademarks, trade names, logos, icons, service marks, and images are deemed proprietary to the Sponsor, its Representatives, or suppliers. Nothing contained in the Product should be construed as granting any license or right to use any of the foregoing without the written permission of the Sponsor, its Representatives, or suppliers, as applicable. Your use of any of the foregoing, except as provided herein, is strictly prohibited and may violate copyright laws, trademark laws, the laws of privacy and publicity, and communications regulations and statutes.

It is affirmed that nothing comprised in the Product should be interpreted as granting any license or the right to use any of the foregoing without specific written permission of the Sponsor, its Representatives, or suppliers, as applicable. Your use of any of the foregoing, except as provided herein, is strictly disallowed and could violate the copyright laws, the trademark laws, the laws of privacy and publicity, and all communications regulations and statutes.

Software Licenses

You hereby acknowledge that all software which might be available or provided to you in the Product may encompass technology that is subject to stringent controls pursuant to export control laws and regulations of the United States of America and other countries and jurisdictions. You acknowledge that you will not transfer or export such software in violation of such applicable export laws and regulations. Neither the Sponsor, its Representatives, nor suppliers authorize the downloading or export of any software or technical data from the Product to any jurisdiction prohibited by such export controls laws and regulations.

The Sponsor, its Representatives, nor suppliers authorize the downloading or exporting of any software or technical data from the Product to any jurisdiction that is prohibited by such export controls laws and regulations.

Jurisdiction

This Agreement shall be construed and governed in accordance with the laws of the State of Rhode Island without reference to its conflict of law rules. Expressly excluded is the application of the United Nations Convention on Contracts for the International Sale of Goods.

If any term of this Agreement is declared null and void or unenforceable by any court of law, competent jurisdiction, such declaration shall have no effect on the remaining terms hereof.

You may contact the Sponsor if you have any questions concerning this Agreement at:

Contract Administrator
25 Ives Road
East Greenwich, Rhode Island 02818
(888) 375-4440
legal@ienrollsolutions.com

The use of any electronic facilities or agents will be in accordance with procedures that were established by the Sponsor and also governed by the applicable provisions of the Uniform Electronic Transactions Act adopted in the governing jurisdiction.

The use of this website will be subject to the Terms of Use Agreement, that identifies the Sponsor. The Sponsor is firmly committed to protecting your privacy online when using this web site. We know with upmost importance how information about you is being used and how it is shared, is something you strongly care about. Thank you for entrusting us to keep your personal information safeguarded as we conscientiously do so with upmost importance. This Privacy Policy outlines the information we collect and how we will use that information. By logging onto this website, you are here-by accepting the practices described in this Privacy Policy.

For more information about how your information is securely protected on this website, see the Security Information.

Types and Uses of Personal Information

It is necessary that this site keeps track of all personal information required for the benefit enrollment. This personal information could include:

• Your name, Social Security Number, date of birth, gender, mailing address, phone number, along with e-mail address.

• Personal information about dependents and family members who might be insured or named as beneficiaries.

• Employment information, work history, and salary information.

• Medical information, also known as Personal Health Information ("PHI"), disclosed during the enrollment or application process

Other information can be collected automatically during your use of this website. This general information includes:

• Your Internet domain,

• Your IP address,

• The list of pages you access,

• The time and date of access.

Personal information along with automatically collected information is kept strictly confidential by the Sponsor and is only used for internal purposes, including and without limitation, providing you with requested services, to improve our marketing and promotional efforts, statistically analyzing web site usage, improving our website content and web site offerings as well as to customize our web sites' content and layout. Except as disclosed in this Privacy Notice, the Sponsor will not sell, lend, rent, or otherwise disclose any personal information to any third parties. However, your personal information could be shared with affiliates, agents, or contractors of the Sponsor in the course of providing the services.

HPPA Information

While using this website, you may share information that qualifies as Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Please refer to the HIPAA Notice for information about PHI may be used and disclosed.

User Profile

Your User ID and Password (PIN or Personal Identification Number) provides access to this site which is associated with your user profile. Your user profile could contain preferences, such as language, email format, and interests.

Cookies

Cookies are pieces of information that a web site transfers to an individual's hard disk which is used for record keeping purposes. This website uses cookies to keep track of your on-line session, which allows the web server to keep track of information as you navigate from page to page. Many internet browsers enable you to erase cookies from your computer hard drive, block all cookies entirely, or receive a warning before a cookie is stored. Please note that this website may not function properly if you block cookies entirely.

Disclosure required by law

The Sponsor, under certain circumstances, may be required to disclose information to the federal or state authorities. The sponsor may disclose any information about you to law enforcement or other government officials that we, in our sole discretion, believe is necessary or appropriate. By accepting this Privacy Policy, you specifically authorize us to do so.

External Links

This website could contain links to other internet web sites. We encourage every one of our partners, contributors, and third parties to implement policies and practices that respect the privacy of our users. However, the Sponsor is not responsible for the privacy practices or the content of such web sites. To the extent that you disclose your information to other parties, even if they are linked from this website, different rules may apply to the use or disclosure of personal information you disclose to them. Because the Sponsor does not control the privacy policies of third parties, you are subject to the privacy customs and policies of that third party.

Amendments and Updates

We review our privacy practices from time to time, and such practices could be subject to change. The Sponsor, therefore, reserves the right to change this privacy notice at any time by posting any revisions on the web site. However, this Privacy Policy is not intended to, and does not, create any contractual or other legal rights in or on behalf of any party.

Business Transfers

In the practice of business, the Sponsor, or substantially all of its assets may be acquired. All customer information will be one of the transferred business assets with this type of transaction.

Feedback

If you have any inquires or concerns regarding this Privacy Policy, don’t hesitate to contact us by e-mail or standard mail at the address given in the Terms of Use Agreement. Our business changes constantly, and we welcome your feedback.