Compliance & Security
Your data. Protected by
design, proven by audit.
UNO holds three of the industry's most rigorous independent certifications.
Here's what each one means for you, in plain language.
- PCI DSS Level 1
Payment Security - HIPAA Compliant
Patient Data Privacy - ISO 27001 Certified
Information Security
First, and one of very few,
companies in the Dominican
Republic with this certification.
Payment Card Industry Data Security Standard
PCI DSS Level 1 Certified
Version 4.0 Certification — the highest level of payment card
security a company can achieve.
PCI DSS is a set of security rules created jointly by Visa, Mastercard, American
Express, Discover, and JCB, the major card networks, to protect payment card
data everywhere it's handled. "Level 1" is the highest tier, reserved for organizations
that handle the largest volumes of cardholder data and are held to the strictest
requirements: rigorous access controls, encrypted data transmission, continuous
network monitoring, and an annual on-site audit by an independent, accredited
assessor, not a form we filled out ourselves. Version 4.0 is the current standard, and it
raised the bar further, including requiring multi-factor authentication for all access to
cardholder data, not just remote access.
What It Means to Have It
When a program runs through UNO, cardholder data, card numbers, expiration dates,
security codes, is handled under the same security discipline used by major banks and
payment processors: encrypted transmission, tightly controlled access, and continuous
monitoring for anything unusual.
Why It's Important
If your program takes payments over the phone, your vendor's PCI compliance is your compliance risk too. A partner
without it exposes you to fraud liability, card-brand fines, and reputational damage if a breach occurs. A partner with
Level 1 certification means that risk has already been independently tested and verified.
Specialized training and secure
handling procedures for every
medical information workflow.
Health Insurance Portability and Accountability Act
HIPAA Compliant
Healthcare practice standards protecting every piece of sensitive
patient information that comes through our lines.
HIPAA is a U.S. federal law that sets the rules for how healthcare information,
called PHI, or Protected Health Information — can be accessed, used, and
shared. It covers everything from a patient's name and diagnosis to appointment
details and insurance information, whether spoken on a call, typed into a system,
or stored in a file. Any organization that handles PHI on behalf of a healthcare
client is legally required to protect it to the same standard as the provider itself.
What It Means to Have It
Our healthcare call center operations follow strict PHI confidentiality and privacy
protocols at every step, and agents supporting healthcare programs complete
specialized training on secure handling procedures before they ever touch a live call:
- 1.
Identity verification, every call
Confirming who we're speaking with before
discussing any patient information. - 2.
Minimum necessary access
Agents see only the information their role
requires, nothing more. - 3.
Secure storage & transmission
Patient data protected in transit and at
rest, end to end.
Why It's Important
For any client in healthcare, the call center is often the most human, most frequent touchpoint a patient has with their
care. A single mishandled call can mean a serious compliance violation and real harm to patient trust. A HIPAA
compliant partner means your patients' information is protected the same way it would be inside your own walls.
A single management system
covering people, process, and technology.
International Organization for Standardization
ISO 27001 Certified
The global benchmark for information security management, independently verified.
What It Is
ISO 27001 is an internationally recognized standard for managing information security,
not just payment cards or health records, but all sensitive data an organization touches:
client information, internal systems, employee records, intellectual property. Rather than
prescribing one-size-fits-all technical rules, it requires an organization to build a complete
Information Security Management System (ISMS): identifying what data matters most,
understanding the risks to it, and putting the right controls in place to protect it. Certification
means an independent, accredited auditor has confirmed that system is real, followed,
and working, not just written down.
What It Means to Have It
ISO 27001 certification touches every layer of how UNO operates:
People
Vetting and training
every employee who
accesses sensitive
systems.Process
Documented controls,
incident response,
and regular internal
audits.Technology
Access controls,
monitoring, and
safeguards across
every system.
Why It's Important
Data security is no longer a back-office concern — it's a condition of doing business. ISO 27001 gives you independent
proof, recognized around the world, that UNO manages information security with the same rigor a global enterprise
expects from its own internal teams. It means security isn't something you have to take on faith.
Compliance isn't a checkbox.
It's how we operate.
These certifications require ongoing audits, continuous monitoring, and regular
recertification to maintain. Your customers trust you with their most sensitive
information, we take protecting it just as seriously.