We are careful about the information we collect students. We only ask for information that is necessary to assist them finding, applying for and receiving scholarships. The information we collect is basic and non-sensitive. Here is a list of some of the information we collect:
Nobody! We don't sell, share, rent, or show specific user information to anyone without the consent of our users.
Even though we do not store sensitive information, we take security very seriously. We actively monitor the security of data on our website in three different areas. They cover where the data is stored, the ability of the code to prevent intrusion and the safety of the data as it moves through the internet.
All of the data is stored on Amazons Web Services in conjunction with Heroku's cloud application platform. Not only does this provide highly reliable services, but it is fast and easily scalable. They each maintain security with industry-recognized certifications and audits.
Our team of senior developers have coded our application in Ruby on the Rails framework utilizing both inherent and proprietary security measures to prevent hacker intrusion. Our application has safeguards regarding session hijacking, Cross-Site Request Forgery (CSRF), redirection, injection, file uploads, admin security, mass assignment and user management.
Any data being transferred between our system and users is encrypted over a secure 256-bit SSL connection. Our SSL certificate is issued by Starfield Technologies. This protects against unauthorized interception of data. It's the same level of data transfer security that your bank provides.