Security & Compliance
Debtor data protected like it is your own. Because it is.
Collections data is among the most sensitive a business holds: identities, balances, health information, financial hardship. HL Hunt encrypts everything, restricts access by role, logs every action, and carries the certifications regulators and auditors expect.
Certifications and frameworks
- SOC 2
- Type II, audited annually
- GLBA
- Safeguards Rule compliant information security program
- HIPAA
- Business Associate Agreements for healthcare clients; PHI handling controls
- PCI DSS
- Compliant payment processing; card data never stored on HL Hunt systems
- Privacy
- CCPA/CPRA and state privacy law compliant
- Licensing
- Collection agency licenses and bonds maintained where required
Technical controls
- TLS 1.3 in transit, AES-256 at rest, HSM-backed key management
- Role-based access, SSO and SCIM, hardware-key MFA, and full audit logs
- Data retention and deletion policies configurable per client and per state
- Tokenized payment credentials with no card data at rest
- Signed webhooks and idempotent APIs
- Multi-region redundancy with automatic provider failover, 99.99% uptime
- Annual penetration testing and continuous vulnerability scanning
Responsible disclosure
We welcome security research. Report vulnerabilities to info@hlhunt.org with "Security" in the subject. We acknowledge within 24 hours and do not pursue legal action against good-faith researchers.
Start recovering more today.
Create a free account, upload your first accounts, and compliant AI outreach begins within the hour. Pay commission only on what you recover.