AECC Data Security & Privacy
Trust AECC to Protect Your Data
Protecting data is a promise to both employers and employees. Relocation expense management includes sensitive financial, personal, and corporate information. To keep that data safe, AECC uses multiple layers of protection, strong oversight, and ongoing monitoring.
Security threats are always changing. AECC adapts along with it through ongoing monitoring, regular audits, third-party testing, and continuous training. In global mobility and today’s hybrid work environment, employees move between offices, home, and workspaces around the world. This makes data security more complex than ever.
Our clients and transferees can count on us to keep their data safe. This is how AECC maintains high standards of data privacy and security in our systems.
Company and Employee Data Privacy
Relocation programs handle highly sensitive information, including employee addresses, family details, financial documents, tax records, and employer cost data. AECC maintains strict relocation data privacy protocols that direct how data is collected, stored, accessed, and shared.
- Record retention policies retain documents only for the required duration and then dispose of them
- File encryption and data masking to protect sensitive fields during transfer and storage
- Encrypted, secure file transfer for document uploads, including receipts, reimbursement forms, and supporting documentation
- Using online submission tools, which are safer than email attachments or paper
- Role-based access controls allow only authorized users to view specific data categories
GDPR, California, and International Compliance
AECC follows all major data protection regulations, including:
- GDPR (General Data Protection Regulation)
- California Consumer Privacy Act (CCPA)
- US/EU and Swiss Privacy Shield frameworks
Our systems and processes are built to meet or exceed these requirements, so global mobility programs stay compliant no matter where employees are moving to and from around the world.
- Data scrubbing schedules remove unnecessary or outdated personal information
- Documented change management systems to review, test, and approve all software, processes, or infrastructure before implementation
- Cyber, crime, and fraud insurance policies provide additional layers of protection
Security Measures to Prevent Breaches
AECC’s proactive and reactive security protocols detect, stop, and defend against threats.
Network and System Protections
- Firewall intrusion prevention systems that monitor and block malicious activity
- Real-time antivirus scanning across all endpoints and servers
- Geo-blocking to restrict access from high-risk regions
- Application control, threat detection, and botnet detection to identify suspicious behavior before it escalates
- Full network and system logging and monitoring to ensure rapid detection and response to anomalies
Infrastructure Resilience
- Redundant power systems to maintain uptime and prevent data loss during outages
- Business continuity and disaster recovery plans that ensure operations can continue in the event of a major disruption
- Third-party penetration testing to validate our defenses and identify areas for improvement
AECC Internal Security Measures and Training
- Stringent remote work policy requirements that define acceptable use, device standards, and secure work practices
- Protected Wi-Fi with rogue access point detection to prevent unauthorized network infiltration
- Two-factor authentication (2FA) for all remote system access
- Ongoing security awareness training and testing to help employees recognize phishing attempts, social engineering, and other common attack vectors
Why Technology Security Matters For Employers
Keep your relocation program running smoothly with less risk. Our security measures protect your organization from:
- Data breaches
- Financial penalties
- Compliance violations
- Reputational damage
- Operational disruption
Why Technology Security Matters For Employees
Employees deserve the peace of mind that their personal information is handled with care.
- Safe submission of receipts, documents, and personal data
- Secure reimbursement processes
- Trust that their information will not be misused or exposed