IDREAM APPLICATION Privacy and Security Policy
Information collected by CVT during this application process will be transmitted and stored in encrypted form by SurveyGizmo. SurveyGizmo is GDPR compliant and CVT has a HIPAA Business Associate Agreement with SurveyGizmo that ensures communication and storage is in line with US privacy laws in relation to protected health information. After the application closing date, encrypted information will be downloaded to CVT information systems and servers which are maintained to a high level of security and undergo regular security audits. A team of ten to twelve CVT employees will have access to the application data for the purposes of review and partner selection. Information pertaining to a smaller subset of applicants will be shared by secure means with the IDREAM donor for selection confirmation.