Trust Center
Dove Direct
Dove Direct, Inc. is a privately held, second-generation commercial print and mail services company in Atlanta, GA. As a data processor and business associate, we handle sensitive client data — and we operate a documented information security program aligned with the NIST Cybersecurity Framework 2.0.
Dove Direct maintains an information security program aligned with NIST Cybersecurity Framework 2.0, validated through annual third-party penetration testing and an independent NIST CSF 2.0 review, most recently in October 2026.
Alignment
NIST CSF 2.0
Aligned · independently reviewed annually
Program at a glance
20
Published policies
reviewed annually
Daily
Security monitoring
SIEM alert review
Annual
Penetration test
independent third party
Annual
Framework review
NIST CSF 2.0, independent
Regulatory alignment
- HIPAA — Business Associate — addresses HIPAA Security Rule requirements
- FCRA — Aligned with FCRA data-handling requirements
- GLBA — Aligned with GLBA Safeguards requirements
- IRS Pub 1075 — Addresses FTI safeguarding requirements
- SOC 2 — Readiness assessment completed by EY (May 2026); Type 2 examination planned for 2027

