GeneSys Online offers users control over a variety of administration types, such as Supervised and Unsupervised, 360 administration etc., using Adobe Flash Player and Flash Remoting to host the online system locally.
Only registered users have access to their administration area. This is protected by a personal username and password. Preventing access to personal data by other users or respondents.
GeneSys Online has only minimal requirements:
- Internet Access
- Adobe Flash Player 9 or above
- A word processor to read/edit reports
- A zip utility to open downloaded reports
Adobe Flash Player is generally available on most computers (99.3% globally for Version 8 – http://www.adobe.com/products/player_census/flashplayer/version_penetration.html), and is an ideal platform for distributing assessments and maximising security. As Flash is used to display assessments there is no caching of tests or personal data locally.
GeneSys Online uses Flash Remoting to deliver assessments to local computers, and establish a secure connection to the online servers throughout the assessment. The connection between the local computer and the online server is protected using 256K encryption, and all personal data is covered by this protection.
Any area of GeneSys Online not using Flash Remoting is protected by a domain registered SSL certificate issued by Global Sign. Meaning that all personal data is encrypted as it is sent to and from the online servers.
GeneSys Online is hosted on a series of dedicated servers based in the UK and Australia. The servers are provided by Fasthosts (www.FastHosts.co.uk) who guarantee 99% up time, and Digital Pacific (http://www.digitalpacific.com.au/). These servers are dedicated, secured and are not shared with any third party. GeneSys Online uses a secured Microsoft SQL Server for storing data. All data is stored in the UK and is protected by the UK Data Protection Act (http://www.ico.org.uk/).
Invitations are sent containing user customised text, as well as login information for their assessment. All login information is unique to that particular respondent and is available in two forms in the email (either a direct link to launch the assessment or a manual method). The manual method uses a Session ID (a series of 11 numbers) and a Respondent ID (a series of 8 random numbers or letters).
To minimise the possibility of email invitations being blocked or directed to the junk mail folder any unnecessary code has been removed from the email body. Invitation system emails have a spam score of 0.001 (typically a firewall will start blocking emails with spam scores of 5.0 or above). Emails are also sent via an online SMTP provider (www.mailjet.com), as this is a paid for service it significantly increases reliability. Emails are sent from dedicated IP addresses and are therefore support IP reputation building. SPF and DKIM records are setup on the DNS for the domain genesysonline.net meaning that this third party SMTP sender is authorised by use to send emails on our behalf.
Upon completion of any assessment results are instantly copied back to the online server and saved in the users account. The user is then notified via email that a result is awaiting their attention.
Psytech International is signed up with the UK Data Protection Act. Data is held on the GeneSys Online database for one year, after which time it is automatically erased. Administrators have the option to delete results prior to this. Reports that have been generated by a user are available for download from their administration area for a period of two weeks, after which they are automatically erased.