Security Overview — Direct Insight Services

Direct Insight Services — Security Overview

Direct Insight Services provides investigative services to insurance carriers, third-party administrators, self-insured employers, legal counsel, corporations, and government agencies. Because our work routinely involves highly confidential information, we maintain information-security practices aligned with the expectations of enterprise clients. This overview summarizes those practices in plain language.

Secure file exchange

Reports, photographs, surveillance video, and evidence are exchanged through our encrypted ShareFile portal — never plain email.
Files are encrypted in transit and at rest by the portal provider.
Each client works within a dedicated, permission-controlled space; clients see only their own matters.

Access control & authentication

Multi-factor authentication is required for portal access.
Access is granted on a least-privilege, need-to-know basis and reviewed as staffing and engagements change.
Portal activity is logged to support accountability and review.

Confidential handling

Every engagement is treated as confidential from intake through secure disposal.
Personnel handle client information on a need-to-know basis and are bound by confidentiality obligations.
We are glad to execute a client-provided NDA and to work within your organization's handling requirements.

Data protection & retention

Sensitive materials are stored within access-controlled systems, not on unmanaged personal devices.
Retention follows client direction and applicable legal and professional requirements; materials are disposed of securely when no longer required.
We limit the collection and sharing of information to what a matter requires.

Privacy & lawful practice

Investigations are conducted lawfully and ethically, respecting applicable privacy laws in the jurisdictions we serve.
We do not sell client or subject information.

Vendor reviews & documentation

We routinely complete client security assessments and vendor questionnaires.
On request, we can provide a signed NDA, a certificate of insurance, and answers in your required format.

ℹ️

Direct Insight Services describes its practices honestly and does not claim certifications it does not hold. Where we reference frameworks such as SOC 2, we mean our practices are aligned with their principles while we continue to formalize our program. We welcome a direct conversation with your security team.

Security & compliance contact

Security & Compliance: security@dic4.com
General inquiries: info@dic4.com