1. Account access
HAMS requires user accounts and provides organization-level roles and permissions to control access to service functions and records. Access should be given only to people who need it for their work. Organization administrators can help manage user access and should remove or update permissions when a person's responsibilities change.
- Use an individual account rather than sharing sign-in details.
- Choose a strong, unique password and keep it private.
- Sign out on shared devices and report unexpected account activity promptly.
2. Your organization's role
Organizations control the records they enter into HAMS and are responsible for deciding which staff may see or update them. Keep user lists and permissions current, use accurate contact details, and notify Taprok if you suspect unauthorized access. Avoid sending sensitive records through ordinary email when reporting an issue.
3. Taprok's role
We work to protect HAMS through authentication, application access controls, and operational practices intended to maintain the confidentiality and integrity of information. We limit access to information to what is needed to operate, support, and protect the service.
Security is an ongoing process, and no internet-connected service can be guaranteed completely secure. We do not make claims on this page about particular certifications or guarantee that unauthorized access will never occur. For information about the personal information handled through HAMS, read the Privacy Policy.
4. Report a security concern
If you notice suspicious activity, believe an account or record has been exposed, or have found a potential vulnerability, contact us promptly at [email protected]. Include a way to reach you and a concise description of what happened. Do not include passwords, access tokens, or personal records in your initial message.
We will review reports and follow up where we can. Please avoid accessing, changing, or sharing information that does not belong to you while investigating a concern.