DiversityInc Top 50 Data Security Policy and Procedures

Data Submission Security Process

An alphanumeric code is assigned to each company and cannot be used by any other organization. All IP addresses for every session utilizing your company’s unique code are tracked. Our data-management practices are ISO/IEC 27002 compliant.

Data Storage

The web-based survey tool, the statistical-analysis tools and all data submissions are on three separate dedicated servers at a leading IT company that deploys a multilayered physical security approach. Company submitted data is retained for year-to-year aggregate trending information.

Access to Data at DiversityInc

Administrative access is limited to select DiversityInc employees on a need to know basis and credentials are changed every 30 days.

Confidentiality Agreements

Because of the volume of participants, we will not sign individual confidentiality agreements. This published statement applies to all companies submitting data.

DiversityInc, Subpoenas and Lawsuits

The DiversityInc Top 50 survey is an editorial process and, therefore, is subject to state laws on source confidentiality. DiversityInc is headquartered in Florida which has well established shield laws in the country to protect source privacy.  In the 18 years we have been managing the survey, we have never agreed to even cooperate with a lawsuit in 19 years of running the survey. If subpoenaed, we will protect your confidential data to the fullest extent permitted by law and provide you prior notice of any disclosures, unless prohibited by law.

How DiversityInc Top 50 Survey Data Is Analyzed

We use cloud-based survey and statistical software and have developed algorithms to evaluate and analyze the data we collect. The evaluation is metrics driven. We measure respondents’ answers based on their assessment against other organizations with similar workforces. For more on the methodology of the ranking, click here 

Credibility of Submission

We require the CEO, CHRO or another corporate officer to sign every submission (notarized). This applies to all companies and organizations.

EEO-1 Information

We give extra credit to companies that either send us a link to a public disclosure of their EEO-1 numbers or send us the information separately. We will not publish their EEO-1 data. The EEO-1 data will be compared with the DiversityInc submission.

We only publish information about companies that make the DiversityInc Top 50 list or one of our Specialty Lists. Any information that is shared is positive and does not disclose human-capital, supplier diversity and/or philanthropy spend related data.