Security and Data Protection

Updated October 7, 2026

Use the HTTPS address shown in your browser. HTTPS encrypts information in transit between your browser and the website service; it does not by itself establish encryption at rest, HIPAA compliance, or the security of every third-party destination. No website or transmission can guarantee absolute security.

Do not send Social Security numbers, Medicare identifiers, payment details, diagnoses, medical records, account passwords, or employee census documents through a general contact form. Use the insurer's or enrollment provider's designated secure application channel when required. Do not share passwords or one-time verification codes with someone who contacts you unexpectedly.

Website hosting may process network addresses, browser information, timestamps, and request logs for delivery, protection, and troubleshooting. External enrollment providers operate their own security and retention controls. Report a suspected problem through the site's inquiry channel if available, without including passwords or sensitive records.