Privacy & Data Security | ASSIST

    DATA PRIVACY AND SECURITY ADDENDUM

    In this Addendum, "Provider" means ASSIST by AiSo, LLC, doing business as "ASSIST." This Addendum forms part of the Master Service Agreement between Provider and Client.

    1. PURPOSE AND REGULATORY COMPLIANCE

    The purpose of this Addendum is to ensure compliance with applicable federal and state laws regarding the protection of Non-Public Personal Information (NPI) and professional confidentiality standards, including: The Gramm-Leach-Bliley Act (GLBA) ("Safeguards Rule" and "Privacy Rule"), and The Uniform Standards of Professional Appraisal Practice (USPAP) (Ethics Rule regarding Confidentiality).

    2. DEFINITIONS

    • "Confidential Information" means any data provided by Client to Provider, including borrower names, loan numbers, subject property addresses, financial information, and the Client's assignment results (opinions of value).
    • "Non-Public Personal Information" (NPI) means "personally identifiable financial information" that is not publicly available, as defined by the GLBA.
    • "Service Provider" means any person or entity that receives, maintains, processes, or is permitted access to NPI through its provision of services to a financial institution (the Client).

    3. GLBA SERVICE PROVIDER OBLIGATIONS

    Provider acknowledges that Client is a "Financial Institution" under the GLBA and that Provider acts as a "Service Provider". Provider agrees to implement a comprehensive written information security program, ensure the security and confidentiality of all NPI, and is prohibited from using or disclosing NPI for any purpose other than the specific purpose of performing the services set forth in the Master Service Agreement.

    4. USPAP CONFIDENTIALITY COMPLIANCE

    Provider agrees not to disclose assignment results (values) or confidential information to any third party without Client's direct authorization. Provider agrees to act as an authorized agent of the Client, strictly adhering to the same confidentiality standards required of the appraiser.

    5. DATA SECURITY MEASURES

    • Encryption: All Client data is encrypted during transmission and while at rest.
    • Access Controls: Access to Client's data is restricted to authorized employees utilizing Multi-Factor Authentication (MFA).
    • Data Segregation: Client's data is logically segregated from other clients' data to prevent unauthorized cross-client access.

    6. INCIDENT RESPONSE AND NOTIFICATION

    In the event of a confirmed Data Breach involving the unauthorized acquisition of Client's unencrypted NPI, Provider shall notify Client in writing within twenty-four (24) hours of discovering the breach and reasonably cooperate with Client in investigating the breach.

    7. DATA RETURN AND DESTRUCTION

    Upon termination, Provider shall immediately cease using Client's credentials, and shall retain Client data only as long as necessary for legal or backup archival purposes, after which it shall be securely destroyed or anonymized.

    8. SMS COMMUNICATIONS & CONSENT

    ASSIST uses SMS only for transactional, non-marketing communications related to appraisal workflow management, order updates, inspection scheduling, appointment confirmations, rescheduling, property access coordination, account notifications, and daily workflow summaries. SMS opt-in data and consent are not sold, rented, or shared with third parties for marketing or promotional purposes. Recipients may reply STOP to opt out or HELP for assistance. Message frequency varies and message and data rates may apply. See our SMS Terms & Messaging Policy for full details.

    9. AUDIT RIGHTS

    Upon reasonable written notice and at Client's expense, Client may request documentation certifying Provider's compliance with the security obligations described herein.