MHESAC Security Policy
MHESAC has a resonsibility to protect from disclosure to unauthorized parties the personally identifiable information (name, address, date of birth, social security number, etc.) of its website users. Therefore, MHESAC has adopted and implemented a website security policy to protect account information of its website users.
Notice and Disclosures
MHESAC will not sell, trade, nor disclose the personally identifiable information of its website users to any unauthorized third parties.
Data Quality and Access
MHESAC takes all steps possible to ensure that the data on the website is accurate. If something is found to be inaccurate MHESAC will make every effort to correct said information as quickly as possible. If it is found to be an inaccuracy with the entire system MHESAC will work swiftly to correct the problem so that your web experience is as trouble-free as possible. Any change to your user account will not be reflected on the website until the following business day. The information contained on the MHESAC website is subject to change without prior advance notice.
MHESAC uses cookies to enhance the website experience for its registered users. A cookie is a small file that is stored on the users hard drive. MHESAC uses this file to maintain certain information about the user as they move between pages. Upon closing your browser, the cookie becomes inactive and a new one will be created the next time you sign on to use one of the password protected features on the MHESAC site. Most browsers are shipped to accept cookies, but this is a function that can be controlled by the user. However, many of the services offered on the website may not run optimally or at all without cookies enabled.
While using the MHESAC website certain information such as your IP Address and time spent on pages may be collected. This non-personal information is collected in order to monitor any unauthorized use or access to the MHESAC site. Anyone caught attempting to harm, steal information from, or otherwise damage the MHESAC website will be prosecuted to the full extent of the law.
Data Security
MHESAC takes security very seriously and has therefore taken every precaution to secure our borrowers information. In order to secure the users information, MHESAC has implemented several security measures to prevent loss, theft, or misuse of any borrower data.
When borrowers use features on the MHESAC website that involves the transferring of personal information, MHESAC requires that a secure connection first be established using 128-bit Secure Socket Layer (SSL) technology. During a secure SSL session, data passed back and forth between the user’s computer and MHESAC’s servers is secured through the use of public key cryptography. The user’s computer exchanges key information with MHESAC's computers to create a private conversation that only the user’s computer and MHESAC's systems may understand. The U.S. government regulates 128-bit encryption; it can only be used by citizens and permanent residents of the United States and Canada. To benefit from this security and to use many of the features on the MHESAC site you will need to download a 128-bit enabled browser from Microsoft, Netscape, or another software company.
In addition to using 128-bit encryption in the browser, all bank account numbers that are stored in MHESAC's databases are encrypted.
Each time you enter a secure connection while using the MHESAC website your browser will notify you, unless the feature has been turned off. Please note that if you have left a secure connection all data sent to MHESAC is over an unsecure connection.
When a user sends e-mail messages to MHESAC, the return address may be used to respond to the inquiry. The content and address contained in the message will be permanently recorded so that it can be referenced in future communications between the borrower and MHESAC. Email is not a secure means of transmitting information.
Contacting Us
If you have any questions regarding the MHESAC Website Security Policy please contact our servicer the Student Assistance Foundation of Montana (SAF) using the information below:
Write to SAF at:
Client Assistance Department
Student Assistance Foundation of Montana
PO Box 5209
Helena, MT 59604-9947
E-Mail SAF at customerservice@safmt.org
Phone SAF's Client Assistance Recovery Education staff at 800/852-2761
ext. 6657