Certa is finalising its secure case-submission infrastructure and privacy controls before accepting sensitive medical documentation through the website. Certa treats medical and personal information as highly sensitive. Certa is implementing the following controls as part of its secure case-submission infrastructure: secure online submission; restricted access; multi-factor authentication for internal users; minimum necessary access; no medical records through general enquiry forms; appropriate retention and deletion controls; incident response procedures.