Data Security

Bates Group understands the importance of data integrity and security and is dedicated to advancing industry best practices and standards. Our clients demand high levels of security and we strive to exceed expectations and ensure that client data is protected and safe. 

Paramount is the safeguarding of client data. Bates Group works on multiple fronts to protect client data including regularly adapting our systems, policies, and procedures to meet the security needs of the largest financial services providers. Physical and system access is restricted to specific individuals, and access is monitored and audited for compliance.

Bates Group undergoes annual SOC 2 Type 2 and SOC for Cybersecurity audits to ensure the proper controls around security, confidentiality, and availability. Bates Group has mapped its control environment to both NIST and IS0 27001 standards. In addition to SOC audits, Bates employs continuous front-line intrusion protection systems to guard against the latest known threats. Bates Group’s servers are protected by state-of-the-art firewall systems, and scans are performed regularly to ensure that any vulnerabilities are quickly identified and patched.  Bates Group regularly performs both internal vulnerability scans and external intrusion testing to ensure our network is properly secured.  Complete penetration tests are performed annually, and all services have rapid failover with complete backups performed nightly.

A disaster recovery plan is in place and tested regularly to ensure data availability should a disaster occur.  Bates Group performs vendor risk assessments of third-party providers, and makes available its systems, operations, and documentation for review by clients for validation and alignment of data security measures.

For additional information or copies of attestation reports, contact Privacy@BatesGroup.com.