Confidentiality, Security and Integrity
We restrict access to nonpublic personal information to employees, contractors, and authorized agents who require that information to provide products or services to you. All individuals with access to this data are expected to maintain its confidentiality and use it only for permitted purposes.
We maintain physical, electronic, and procedural safeguards that meet federal standards to protect your nonpublic personal information from unauthorized access or misuse. Multiple layers of security are utilized to help ensure the confidentiality and integrity of your transactions and account information.
Our security program includes protections such as:
Browser Encryption
Login ID and Password Controls
Network Security and Monitoring
Security Definitions and Protocols
These measures work together to provide a secure environment for accessing and managing your information.
Browser Encryption
To access account information and complete secure transactions, a browser capable of 128‑bit encryption is required. Modern web browsers support this level of security by default.
Secure browsers use Secure Sockets Layer (SSL) or Transport Layer Security (TLS) technology when communicating with our servers. This encryption scrambles your information so that it cannot be read or intercepted by unauthorized parties during transmission.
Encryption helps ensure that only the North Dakota Housing Finance Agency (NDHFA) can interpret your sensitive data, providing a protected environment for accessing your account online.
Wireless Terms and Conditions
When enrolled to receive wireless (text) messages from NDHFA, users agree to the following Terms and Conditions. To stop receiving messages, reply STOP. Reply HELP form more information or contact NDHFA at 701-328-8080 or hfaservicing@nd.gov.
Most wireless service providers support text messaging. While NDHFA does not charge for sending text message updates, your wireless carrier may assess messaging or data fees. Please check with your provider for details regarding any potential costs.
Terms and Conditions
User Privacy:
NDHFA will not disclose or use mobile numbers for any purpose beyond what has been expressly authorized by the customer.
User Fees:
NDHFA does not charge recipients to receive text message; however, messaging and data rates from your wireless provider may apply.
Opt-Out:
To stop receiving messages from NDHFA, reply STOP from your mobile device at any time. You will receive a confirmation text acknowledging you opt-out. No additional messages will be sent unless you opt in again.
Warranty:
NDHFA is not responsible for delays in the receipt of SMS (Short Message Service) messages. Delivery depends on the effective transmission by your wireless service provider or network operator. Carriers are not liable for delayed or undelivered messages.
Departments:
By opting in to this service, users will receive SMS messages only from NDHFA.
Disclosure of Information
We do not disclose your nonpublic personal information to anyone except as permitted by law. When disclosure is necessary to provide the products or services you have requested or authorized, we may share information with certain contractors, agents, or other authorized parties who assist us in carrying out those responsibilities.
Before any information is shared, these parties are required to agree to maintain the confidentiality of your information and to use it only for the purposes for which it was provided.
Login ID and Password
To access account information, you must provide a Login ID and password to enter the secure area of the site. Your Login ID and password are unique to you, and you are the only authorized user of the service under this agreement. You are fully responsible for all activity conducted under your Login ID. For this reason, it is important that you take appropriate precautions to protect the confidentiality of your Login ID and password.
NDHFA reserves the right to cancel your registration if the information provided during enrollment is found to be incorrect, fraudulent, or misleading, or if misuse of your account is detected.
Your password is never displayed when entered. Our system uses a “three‑strikes” lockout mechanism to help prevent unauthorized access. After three unsuccessful login attempts, your account will be locked, and you will need to contact NDHFA to verify your identity before the account can be unlocked.
Upon successful login, a Digital ID provided by Thawte verifies your identity and establishes a secure, encrypted session.
How can I protect myself?
Don't share your password
Never reveal your password to anyone. Do not write it down in a location where someone could find or guess it. Change your password regularly and avoid using easily guessed words, dictionary terms, or simple number sequences. Choose strong combinations such as unique phrases or mixes of letters, numbers, and symbols that are meaningful to you but hard for others to guess.
Avoid accessing NDHFA’s website from a computer that may be used or monitored by an untrusted individual. Be aware of your surroundings and ensure no one is watching as you enter your password. Keep your computer secure by installing updates, maintaining antivirus software, and following standard security practices.
Log Out
If you step away from your computer, use the “Log Out” feature to end your session. Logging out ensures you will need to re‑enter your Login ID and password before accessing your account again. As an added safeguard, we recommend closing your browser after you log out.
Your session will also automatically time out after a period of inactivity. To begin a new session, simply log in again.
Network Security and Monitoring
Firewalls are used to protect NDHFA systems and networks from unauthorized internet traffic. Firewalls help ensure that only approved traffic is allowed to reach NDHFA systems, while all other traffic is blocked. These systems also create logs of network activity, which support security monitoring and auditing efforts.
E-mail
Inquiries submitted through our website use Secure Socket Layer (SSL) technology for transmission. Because standard email is not secure, our email responses will not include confidential account information. If you need to discuss sensitive information, please contact us by phone or U.S. mail.
QUESTIONS?
If you have questions about the privacy of your information, please feel free to contact NDHFA at (701) 328-8080, (800) 292-8621, 711 (TTY) or hfainfo@nd.gov.