Security
Security Overview
How we approach the protection of information handled through this website and our servicing operations.
RCM Servicing takes the protection of borrower, lender, and account information seriously. This page describes, in plain language, the kinds of safeguards we apply. It is an overview of our approach — not a certification, guarantee, or complete description of any specific control.
Secure website communications
This website is designed to be served over HTTPS, so information you submit through it is encrypted in transit between your browser and the server.
Access controls
Access to business systems and account information is limited to personnel who need it to perform their work. Employee access is granted on a need-to-know basis and adjusted as roles and responsibilities change.
Server-side form handling
Website form submissions are validated and processed on the server. Email delivery credentials and other secrets are kept in server-side configuration and are never exposed in the code that runs in your browser.
Limited information collection and data minimization
The website forms request only the information needed to respond to an inquiry. We deliberately do not ask for — and instruct visitors not to send — Social Security numbers, complete loan numbers, banking credentials, or passwords through the website. Collecting less sensitive data through the public site means less sensitive data to protect there.
Input validation and spam prevention
Form input is validated on both the client and the server, submissions are rate-limited, and spam-prevention measures help filter automated abuse. Form content is sanitized before it is included in notification emails.
Secure hosting and software updates
The website is built on maintained, widely used software components, and we keep dependencies updated as security releases become available. Hosting is designed to use reputable infrastructure with modern security practices, including appropriate security headers.
Vendor oversight
Where third-party providers support our operations — such as hosting or email delivery — we consider their security practices as part of selecting and continuing to use them.
Incident-response planning
We plan for the possibility that something goes wrong. If a security incident affecting personal information were to occur, our approach is to assess it promptly, contain it, and notify affected parties and authorities as required by applicable law.
Our commitment
No method of electronic transmission or storage is completely secure. RCM Servicing works to apply reasonable administrative, technical, and organizational safeguards appropriate to the information and systems involved.
Security practices are reviewed and updated as business systems, legal requirements, and operational needs evolve.
Reporting a security concern
If you believe you have found a security issue with this website, or if you have received a suspicious communication claiming to be from RCM Servicing, please contact us: