SUMMARY
As benefits plan sponsors, employers have fiduciary responsibilities to utilize the planʼs operational data, both current and historical. However, employersʼ utilization of that data is subject to regulatory and contractual obligations. One example is the HIPAA Privacy Rule, which prevents benefits staff who are not plan administrators from accessing certain types of data.
The Lockbox is a Software-as-a-Service (SaaS) data-management tool designed for plan sponsors to exercise control over sensitive data, while adhering to compliance requirements and constraints. This memorandum describes the security design principles incorporated into the Lockbox platform and explains how data is protected from unauthorized access or modification.
The Lockbox can be implemented within Amazon Web Services (AWS), Microsoft Azure, or both. The software is managed and maintained by Abett. It integrates AWS and Azure security features in fundamental ways, including technologies like virtual private clouds (VPC). The softwareʼs operation is fully controlled by the Lockbox client, subject to compliance constraints.
Learn more about Lockbox security.
Download the whitepaper >>