As a service to our families, MCA utilizes an online invoicing company named Smart Tuition. Smart Tuition enables families to choose their payment methods for MCA and access, pay or service their invoices and accounts 24-7. In addition, MCA families that choose to apply there is a service of the Smart Tuition family named "Smart Aid" to help process applications.
From their Privacy and Security disclosure:
Privacy & Security
Protecting the privacy of our clients' personal and financial information is our highest priority. The information listed below explains how Smart Tuition protects your information. If there are any questions that this statement does not address, please contact us.
Smart Tuition has adopted numerous procedures to protect the confidentiality of you and your school's information. Smart Tuition’s service representatives are instructed to provide information to, and accept instructions from only the parent(s) or guardian(s) named on the account as well as school employees who have been specifically authorized in writing to work with Smart Tuition. All of the information that we maintain on your accounts is filed in a secure location, and all trash is shredded. We do not disclose any nonpublic personal information about our customers or former customers to anyone, except as permitted by law.
Access to your personal and account information is restricted to those employees who need to know that information as part of their job, to service your account or to provide products and services to you. We maintain physical, electronic and procedural safeguards that are designed to guard your nonpublic personal information. We adhere to the Payment Security Industries Standard for storing card holder data.
In addition, from their website regarding data security:
Data, security & privacy
Protecting the privacy of financial data is our highest priority. Smart completes a voluntary SSAE16 Audit to assure proper handling of information. We transmit data using 256-bit encryption and follow the FTC's Red Flag Rules. We are PCI-DSS compliant. Funds are secure and insured.
In addition, concerning regular security protocols they are validated by 403 labs which checks their service in a continual manner. Their site's and service status is available by clicking on their parent login page on the "403 icon":
Per the report:
Smart LLC dba Smart Tuition is enrolled in 403 Labs’s vulnerability scanning and parent.smarttuition.com has passed security tests checking for a wide variety of known security flaws as required by American Express, Discover, MasterCard and Visa. This seal will only appear when a website meets these standards.
Please note the attached letter from Smart Tuition as well.