Checking Login

Confirm your Identity

Please enter the security code we just sent you below

privacy
Privacy Notice

Sign In Denied

failed

Sign In Failure

failed

Oops! Looks like the User Name and Password you entered don't match our system.

Account Locked

lockedaccount

Your account has been locked due to too many incorrect login attempts. Click below to reset your account.

Unlock Account

Close All Active Sessions

By entering your MyEnroll login credentials, you will be confirming that you want all your Active Sessions closed – This Action Can Not be Reversed.

Account Locked due to Inactivity

failed

Looks like your account has been locked for non-use. Click the "Unlock Account" button below to get back on your way.

Employer Account Terminated

failed

Looks like your Employer's account is no longer active. Please contact your Employer for more information.

Temporary Password Expired

failed

Looks like the temporary password you entered has expired. Click the "Help Me" button below to request a new temporary password.

Limited access

failed

Your times you are allowed to access MyEnroll have been limited by your Employer. Please contact your Employer for assistance

Account Locked

failed

Your account is locked. Only your Employer can unlock your account. Please contact your Supervisor.

Redirect Notice

failed

This page isn't quite ready yet. In a few seconds, we're going to redirect you back to the current Sign In page.


Redirecting in 5 seconds...

ONLINE PRIVACY STATEMENT

 

PRIVACY STATEMENT

Benefit Allocation Systems, LLC and its subsidiaries and affiliates ("BAS," "we," "us," or "our") are committed to protecting privacy and maintaining the confidentiality and security of personal information. This Privacy Statement explains how BAS collects, uses, discloses, retains, and protects personal information in connection with MyEnroll360, BAS websites, and related online support services, including Zendesk and BAS' AI-based virtual assistant, Ally.

This Privacy Statement applies to information collected through these services and should be read together with the MyEnroll360 Terms of Use and, where applicable, any agreement between BAS and the employer, association, trust, plan sponsor, insurer, broker, or other organization through which services are provided.

  1. About BAS and MyEnroll360

BAS is a professional benefits administration company. BAS developed, owns, and operates MyEnroll360, its proprietary web-based platform used to provide and support benefits enrollment, eligibility administration, data interchange, reporting, billing, payment processing, customer service, compliance support, and other contracted administrative services.

Organizations that engage BAS may use MyEnroll360 to provide information to BAS, administer benefit programs, facilitate transactions, and support BAS' performance of designated services.

Various types of users may access or interact with MyEnroll360, including:

  • Employer clients;
  • Employees and other individuals associated with employer clients;
  • Former employees, retirees, dependents, beneficiaries, and other benefit participants;
  • Non-employer clients, such as brokers, associations, trusts, and other organizations;
  • Individuals associated with non-employer clients, such as association members;
  • Members or participants in plans for which BAS provides third-party administration or other administrative services;
  • Administrators authorized to manage group or individual information; and
  • Other individuals authorized to access MyEnroll360.

Information may be entered directly by an individual or submitted on the individual's behalf by an employer, former employer, association, trust, plan sponsor, insurer, broker, administrator, vendor, or other authorized party. Users may also use MyEnroll360 to make benefit elections, provide personal or group information, access documents, and complete benefit-related or payment transactions.

  1. BAS' Role in Processing Information

In many circumstances, BAS processes personal information on behalf of an employer, former employer, association, trust, plan sponsor, insurer, broker, or other organization that has engaged BAS to provide services. In those circumstances, the contracting organization may determine the purposes for which information is provided to BAS and may direct BAS' processing of that information.

BAS may also collect, use, retain, and disclose information as necessary to operate and secure MyEnroll360 and related services, administer its business, comply with legal and regulatory obligations, enforce contractual rights, prevent fraud or misuse, and fulfill BAS' own legitimate operational responsibilities.

Because BAS frequently processes information at the direction of a contracting organization, individuals seeking to correct information, restrict certain uses or disclosures, or exercise rights concerning information maintained through that relationship may need to contact the employer, former employer, association, trust, plan sponsor, insurer, or other organization through which they receive access to BAS services.

  1. Information We Collect

The information BAS collects depends on the services being provided, the individual's relationship with BAS or a BAS client, and how the individual interacts with MyEnroll360 or other BAS services.

BAS may collect the following categories of information:

Identifying and Contact Information

This may include name, address, email address, telephone number, date of birth, Social Security number, employee or member identification number, and other identifying information.

Employment and Eligibility Information

This may include employer, employment status, hire and termination dates, rehire dates, hours, compensation information, employee classification, work location, leave information, payroll information, and other information relevant to eligibility or benefits administration.

Benefit and Coverage Information

This may include benefit elections, plan participation, coverage levels, effective and termination dates, qualifying events, dependent and beneficiary information, premium amounts, contribution information, and other enrollment or eligibility information.

Dependent, Beneficiary, and Household Information

This may include information about spouses, domestic partners, children, dependents, beneficiaries, and other individuals associated with benefit coverage or administration.

Health and Benefits-Related Information

Depending on the services provided, BAS may process information concerning health plan participation, coverage, claims-related administration, reimbursement accounts, continuation coverage, or other benefits-related matters. Certain information may be subject to additional protections under applicable law or contractual requirements.

Financial and Payment Information

This may include bank account information, payment instructions, transaction records, billing information, premium payment information, and other information necessary to process benefit-related transactions.

Communications and Support Information

This may include emails, support requests, telephone or chat interactions, documents submitted to BAS, questions, responses, and other communications with BAS.

Technical and Usage Information

When individuals access BAS websites, MyEnroll360, or related support tools, BAS and its service providers may automatically collect technical information such as IP address, browser type, operating system, device information, login activity, session information, pages or features accessed, interaction history, and other usage or security information.

  1. Sources of Information

BAS may collect personal information from:

  • Individuals using MyEnroll360 or other BAS services;
  • Employers and former employers;
  • Associations, trusts, plan sponsors, insurers, brokers, and other contracting organizations;
  • Authorized administrators;
  • Insurance carriers and benefit plans;
  • Payroll providers and other service providers;
  • Financial institutions and payment processors;
  • Governmental or regulatory sources, where applicable;
  • Zendesk and other support technologies;
  • Cookies, analytics technologies, system logs, and similar technologies; and
  • Other authorized parties involved in providing or administering services.

Much of the personal information maintained in MyEnroll360 is provided by an employer, former employer, association, trust, plan sponsor, insurer, broker, or other affiliated organization so that BAS can perform contracted services. Other information is provided directly by individuals to participate in benefits, complete transactions, obtain support, or use available services.

  1. How We Use Information

BAS may use personal information to provide, manage, and support contracted and authorized services, including to:

  • Process benefit enrollments, elections, and changes;
  • Maintain eligibility, demographic, and participant records;
  • Administer new hire, life event, open enrollment, continuation coverage, billing, reimbursement, and other benefit-related processes;
  • Support federal, state, or other reporting and compliance services;
  • Facilitate billing, premium collection, payment processing, and related transactions;
  • Exchange authorized information with insurers, payroll providers, plan administrators, and other parties;
  • Provide reporting and administrative support;
  • Provide customer service and technical support;
  • Authenticate users and manage system access;
  • Communicate about benefits, services, transactions, support requests, or account activity;
  • Maintain business, transaction, compliance, and audit records;
  • Monitor system performance and improve functionality and user experience;
  • Detect, investigate, and prevent fraud, security incidents, misuse, and unauthorized access;
  • Protect the rights, property, security, and integrity of BAS, its clients, users, and others;
  • Comply with legal, regulatory, contractual, and governmental requirements; and
  • Perform other activities consistent with the services requested or authorized.

BAS generally uses personal information provided for benefits administration purposes to perform contracted services and related operational, security, legal, and compliance functions. BAS does not use personal information provided by clients for benefits administration purposes for unrelated marketing.

BAS may communicate about BAS services where permitted by applicable law and appropriate based on the recipient's relationship with BAS. Where required, recipients will be provided an opportunity to opt out of marketing communications.

  1. How We Disclose Information

BAS does not sell or rent personal information.

BAS may disclose personal information as reasonably necessary to provide services, follow authorized instructions, operate and secure MyEnroll360, administer BAS' business, and comply with legal or regulatory obligations.

Depending on the services provided, BAS may disclose information to:

  • Employers, former employers, associations, trusts, plan sponsors, insurers, brokers, and other organizations associated with the individual's benefits or services;
  • Insurance carriers, health plans, third-party administrators, and other benefit providers;
  • Payroll providers and other client-authorized recipients;
  • Financial institutions, banks, payment processors, lockbox providers, and other parties involved in payment transactions;
  • Hosting, technology, communications, analytics, security, and other service providers that support BAS operations;
  • Zendesk and other providers supporting customer service or help desk functions;
  • Professional advisors, auditors, consultants, and other parties supporting legitimate business, legal, compliance, or security functions;
  • Government agencies, regulators, law enforcement, courts, or other parties when required or permitted by applicable law;
  • Parties involved in an actual or potential corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections where applicable; and
  • Other parties as authorized by the individual, a BAS client, or another party with authority to provide such direction.

BAS may also disclose information when reasonably necessary to protect BAS, its clients, users, or others; investigate suspected fraud or misuse; respond to security incidents; enforce agreements; or establish, exercise, or defend legal claims.

  1. Cookies and Similar Technologies

BAS and its service providers may use cookies and similar technologies to operate websites, MyEnroll360, and related support services.

These technologies may be used to:

  • Authenticate users and manage secure sessions;
  • Maintain system functionality;
  • Remember preferences;
  • Detect and prevent unauthorized activity;
  • Monitor performance and troubleshoot technical issues;
  • Understand how services and features are used;
  • Improve user experience; and
  • Support analytics and operational reporting.

Some cookies and similar technologies are necessary for MyEnroll360 or related services to function properly. Disabling cookies through browser settings may limit or prevent access to certain features.

BAS may use analytics tools, such as Google Analytics, on certain websites or online services to better understand website activity and improve performance and user experience. The technologies used may vary depending on the website, service, and applicable configuration.

  1. Account Access and Information Updates

Authorized users may access certain information by logging into MyEnroll360 using their credentials.

Because information in MyEnroll360 may have been provided by or on behalf of an employer, former employer, association, trust, plan sponsor, insurer, or other organization, individuals seeking to change information should generally contact the organization responsible for providing or maintaining that information.

BAS may direct requests to the applicable organization when BAS processes the information on that organization's behalf or when the organization is responsible for determining whether a requested change is appropriate.

  1. Privacy Requests

Depending on applicable law and the nature of an individual's relationship with BAS, individuals may have certain rights concerning their personal information.

Because BAS frequently processes information on behalf of employers, plan sponsors, associations, trusts, insurers, and other organizations, requests concerning information maintained through those relationships may need to be directed to the applicable organization. BAS may refer or direct a request accordingly.

BAS may need to verify identity and authority before acting on a request. Certain information may be exempt from a request or retained as required or permitted by law, contract, regulatory obligations, security requirements, or legitimate business needs.

Questions or privacy requests may be submitted using the contact information provided at the end of this Privacy Statement.

  1. Security

BAS maintains administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or destruction.

BAS' security practices may include access controls, authentication measures, encryption technologies, monitoring, secure storage practices, workforce policies and training, and other safeguards appropriate to the nature of the information and services involved.

No method of electronic transmission, processing, or storage is completely secure. Accordingly, BAS cannot guarantee absolute security.

Users are responsible for protecting their login credentials, using appropriate security practices, and promptly reporting suspected unauthorized access or misuse.

  1. Data Retention

BAS retains personal information for as long as reasonably necessary to provide contracted services, maintain business and compliance records, satisfy legal and regulatory obligations, support audits, resolve disputes, enforce agreements, respond to governmental or legal matters, and address legitimate operational and security needs.

Retention periods vary depending on the type of information, the services provided, client instructions, contractual obligations, applicable law, regulatory requirements, and BAS' record retention practices.

Upon termination of services or access, BAS may retain, archive, return, or delete information in accordance with applicable law, contractual requirements, client instructions where applicable, and BAS' record retention practices.

  1. Information About Children and Minor Dependents

MyEnroll360 is not directed to children for independent use. However, BAS may collect and process information about minor dependents when provided by a parent, guardian, employer, former employer, association, trust, plan sponsor, insurer, authorized administrator, or other authorized party for benefits enrollment, eligibility, administration, coverage, or related purposes.

Such information is handled in accordance with this Privacy Statement and applicable legal and contractual requirements.

  1. U.S.-Based Operations and Access

MyEnroll360 is owned, managed, and controlled from within the United States. BAS' operations and services are primarily intended for use in connection with U.S.-based benefits administration and related services.

Access to MyEnroll360 may be subject to geographic, contractual, security, or technical restrictions. Users must comply with applicable access requirements and may not circumvent restrictions imposed by BAS.

Where personal information is lawfully accessed or processed from outside the United States, such information may be transferred to and processed in the United States, subject to applicable law and contractual requirements.

  1. Third-Party Websites and Services

BAS websites, MyEnroll360, or related services may contain links to third-party websites or services. BAS does not control the privacy, security, or information practices of independent third parties.

Individuals who access third-party websites or services should review the privacy statements and terms applicable to those services. The inclusion of a link does not necessarily constitute BAS' endorsement of the third party or its practices.

  1. Zendesk Support and Help Services

BAS uses Zendesk to provide help desk support, access to informational articles, and support functionality.

When an individual interacts with BAS support tools, including by submitting a request, browsing support content, using chat functionality, or communicating with a live support representative, BAS and its service providers may collect and retain:

  • Questions and responses;
  • Support request content;
  • Chat or communication history;
  • Navigation and interaction activity;
  • Session information;
  • IP address, browser type, and related technical information; and
  • Other information provided during the support interaction.

BAS may use this information to:

  • Provide and manage support;
  • Respond to questions and service requests;
  • Maintain support and business records;
  • Monitor service quality;
  • Train authorized personnel;
  • Improve support processes and user experience;
  • Investigate technical or security issues; and
  • Fulfill legal, regulatory, contractual, and operational obligations.

Users should provide only information reasonably necessary for the support request. Where a matter involves sensitive or account-specific information, BAS may direct the user to another appropriate support channel.

  1. Ally AI-Based Virtual Assistant

BAS may provide access to Ally, an AI-based virtual assistant designed to provide general benefits information, navigation assistance, and support.

When an individual interacts with Ally, the content of the interaction and related technical information may be collected, processed, and retained by BAS and its authorized service providers to provide support and operate the service. Information submitted through Ally may be processed using automated technologies to generate responses.

Ally's responses may be generated through automated systems and may not reflect real-time updates, individual plan terms, specific account information, or the most current information available. Users should review applicable plan documents and other authoritative materials and should contact an appropriate representative when individualized assistance is needed.

Users should not submit personal or sensitive information through Ally unless reasonably necessary to address the inquiry. If additional assistance is needed, an interaction may be transferred or made available to an authorized BAS representative or other support personnel.

Use of Ally does not create a legal, medical, financial, fiduciary, or other professional advisory relationship.

  1. Zendesk Cookies and Similar Technologies

Zendesk may use cookies and similar technologies to support the delivery and functionality of its support tools. Depending on the applicable configuration, these technologies may be used for:

  • Authentication and session management;
  • Maintaining support functionality;
  • Recognizing returning users;
  • Monitoring performance;
  • Understanding feature usage;
  • Tracking interactions with support content;
  • Remembering support preferences; and
  • Identifying technical or service issues.

These technologies may collect technical information such as IP address, browser type, device information, and interaction history.

Users may manage certain cookies through browser settings. Disabling cookies may affect the availability or functionality of support features.

  1. Legal and Regulatory Requirements

BAS may collect, use, retain, or disclose information when reasonably necessary to comply with applicable laws, regulations, court orders, subpoenas, governmental requests, contractual obligations, audit requirements, or other legal processes.

BAS may also use or disclose information as reasonably necessary to investigate fraud, security incidents, unauthorized activity, or violations of applicable agreements or policies, and to protect the rights, property, safety, or security of BAS, its clients, users, or others.

  1. Changes to This Privacy Statement

BAS may update this Privacy Statement from time to time to reflect changes in services, technologies, business practices, legal requirements, or other circumstances.

Updates will be posted with a revised effective date. Users are encouraged to review this Privacy Statement periodically.

  1. Contact Us

For questions about this Privacy Statement, privacy practices, or the handling of personal information, please contact:

Benefit Allocation Systems, LLC
Attn: General Counsel
P.O. Box 62407
King of Prussia, PA 19406

Email: compliance@BASusa.com

Updated: July 27, 2026

Copyright © 2026 Benefit Allocation Systems, LLC. All rights reserved.

 

 

 

MyEnroll360 TERMS OF SERVICE

MyEnroll360 Terms of Use

Welcome to MyEnroll360, a proprietary platform owned and operated by Benefit Allocation Systems, LLC ("BAS," "we," "us," or "our"). These Terms of Use ("Terms") govern access to and use of MyEnroll360.

MyEnroll360 is used in connection with benefits enrollment, eligibility administration, billing, payment processing, reporting, compliance support, customer service, and other administrative services. Depending on the applicable program or services, users may include employees, former employees, retirees, dependents, association members, plan participants, client administrators, employer representatives, brokers, consultants, and other authorized individuals.

BY ENTERING THE WEBSITE OR USING MYENROLL360, YOU AGREE TO BE BOUND BY THESE TERMS. IF YOU DO NOT AGREE, YOU MAY NOT ACCESS OR USE THE MYENROLL360 SITE.

  1. Individual Acceptance and Authorized Use

You agree to these Terms in your individual capacity as a user of MyEnroll360. Your acceptance of these Terms does not, by itself, bind your employer, former employer, association, trust, plan sponsor, insurer, broker, or other organization to these Terms.

If you access or use MyEnroll360 in an administrative or representative capacity on behalf of an organization, you represent that you are authorized to access and use MyEnroll360 for the functions made available to you and within the scope of authority granted to you.

Access to MyEnroll360 is limited to authorized users. You may use MyEnroll360 only for legitimate purposes related to the benefits, programs, services, or administrative functions for which access has been provided.

  1. Relationship to Other Agreements

BAS may provide MyEnroll360 or related services pursuant to an agreement with an employer, former employer, association, trust, plan sponsor, insurer, broker, consultant, third-party administrator, or other organization. The organization through which you receive access to MyEnroll360 may or may not be the organization that has contracted directly with BAS.

These Terms govern your individual access to and use of MyEnroll360. If a separate written agreement with BAS governs the applicable services, program, or organizational relationship, that agreement will control in the event of a conflict with these Terms with respect to the parties to that agreement and the subject matter of the conflict.

Nothing in these Terms creates a contractual relationship between BAS and you or between BAS and an organization solely because an individual associated with that organization accesses MyEnroll360 or accepts these Terms.

  1. Privacy

Use of MyEnroll360 is subject to the BAS Privacy Statement, which describes BAS' collection, use, disclosure, retention, and protection of personal information.

Depending on the applicable services, BAS may process information on behalf of or at the direction of an employer, former employer, association, trust, plan sponsor, insurer, broker, or other organization. Questions or requests concerning information maintained through such a relationship may need to be directed to the applicable organization.

  1. User Accounts and Credentials

Each user must access MyEnroll360 through the credentials and authentication methods assigned or authorized for that user. User credentials are personal to the authorized user and may not be transferred, shared, assigned, or made available to another person.

You agree to:

  • Maintain the confidentiality of your login credentials;
  • Use only credentials assigned or authorized for your use;
  • Not permit another person to access MyEnroll360 through your account;
  • Not use another person's credentials;
  • Comply with applicable authentication and security requirements; and
  • Promptly report suspected unauthorized access, credential compromise, or misuse.

You are responsible for activity conducted through your account to the extent resulting from your acts, omissions, credential sharing, or failure to comply with these Terms.

BAS may monitor and audit access to and use of MyEnroll360 for security, compliance, operational, and misuse-prevention purposes.

  1. Security Requirements

Users must access MyEnroll360 using reasonably secure devices, networks, and supported technologies and must comply with security requirements communicated by BAS or the organization through which access is provided.

You may not knowingly:

  • Access MyEnroll360 through a compromised device or account;
  • Circumvent authentication, multi-factor authentication, geographic restrictions, access controls, or other security measures;
  • Disable or interfere with security protections;
  • Introduce malicious code or harmful technologies; or
  • Use MyEnroll360 in a manner that creates an unreasonable security risk.

BAS may establish, modify, or enforce technical and security requirements for access to MyEnroll360.

  1. Individual User Access

Individual users, such as employees, former employees, retirees, association members, dependents, or other participants, may be permitted to access personal information, make benefit elections, provide or update information, access documents, submit requests, make payments, or complete other authorized transactions.

You are responsible for reviewing information and transactions submitted through your account and for providing information that is accurate to the best of your knowledge.

Access to MyEnroll360 does not independently establish eligibility for any benefit, insurance coverage, plan, program, reimbursement, or payment. Eligibility and coverage are governed by applicable plan documents, insurance contracts, program terms, employer or plan sponsor determinations, and other governing requirements.

  1. Administrator and Representative Access

Users granted administrative or representative access may have access to information concerning other individuals or organizations. Such users may access, use, download, modify, transmit, or disclose information only:

  • Within the scope of their authorized responsibilities;
  • For legitimate purposes related to the applicable benefits, program, or services;
  • In accordance with applicable law;
  • In accordance with requirements imposed by the organization granting or authorizing access; and
  • In compliance with these Terms.

Administrative access may not be used for personal purposes, curiosity, unauthorized monitoring, or any purpose outside the user's authorized responsibilities.

Users with administrative or representative access must promptly notify the appropriate organization or BAS, as applicable, if they no longer require access or become aware that their access rights are inaccurate or excessive.

BAS may rely on access authorizations, role assignments, and instructions provided by an organization or other party reasonably appearing to have authority to grant or manage such access.

  1. Information and Data Submitted Through MyEnroll360

As part of your use of MyEnroll360, you may submit, upload, enter, transmit, or otherwise provide personal information, eligibility information, enrollment information, dependent or beneficiary information, billing or payment information, documents, communications, or other content or information ("Submitted Information").

You may submit Submitted Information only for legitimate and authorized purposes. Users are responsible for obtaining any authorizations, consents, or permissions required under applicable law before submitting information concerning another individual.

If you submit information on behalf of another person or organization, you represent that you have appropriate authority to do so. This does not require an individual user to obtain separate consent where information is lawfully provided in connection with the user's own benefit enrollment, dependent coverage, beneficiary designation, payment transaction, or other authorized activity.

You may not knowingly submit information that:

  • Is false or materially misleading;
  • You are not authorized to provide;
  • Violates applicable law or third-party rights;
  • Contains malicious code, viruses, or other harmful technologies; or
  • Is submitted for fraudulent, abusive, or unauthorized purposes.

BAS may rely on information submitted by users, clients, employers, associations, trusts, plan sponsors, insurers, brokers, payroll providers, carriers, vendors, and other authorized parties without independently verifying its accuracy or completeness.

BAS may refuse, suspend, or delete information submitted in violation of this Section.

  1. Data Ownership

BAS does not acquire ownership of personal information or client-provided data merely because such information is submitted to or processed through MyEnroll360.

Rights concerning personal information and other submitted data may be governed by applicable law, the relationship between the individual and the relevant organization, and any applicable written agreement with BAS.

Nothing in these Terms grants a user ownership rights in MyEnroll360 or BAS Materials, as defined below.

  1. BAS Ownership and Intellectual Property

As between BAS and the user, BAS owns all right, title, and interest in and to MyEnroll360 and BAS-developed software, source code, object code, algorithms, tools, configurations, specifications, documentation, templates, workflows, methodologies, designs, interfaces, reports, formats, processes, and other proprietary materials, together with modifications, improvements, and derivative works thereof (collectively, "BAS Materials").

BAS Materials are protected by copyright, trademark, trade secret, patent, and other applicable laws.

Except for the limited right to use MyEnroll360 as authorized under these Terms, no right, title, license, or interest in BAS Materials is granted to you.

  1. Prohibited Conduct

You may not misuse MyEnroll360 or BAS Materials. Without limitation, you may not:

  • Access information, accounts, records, or functionality you are not authorized to access;
  • Share credentials or permit unauthorized account access;
  • Impersonate another person or misrepresent your identity or authority;
  • Copy, reproduce, distribute, sell, rent, sublicense, or commercially exploit BAS Materials except as expressly authorized;
  • Reverse engineer, decompile, disassemble, decode, or attempt to discover source code, underlying structure, algorithms, or nonpublic technical components;
  • Scrape, crawl, harvest, systematically download, or extract data or content through automated means without BAS' prior written authorization;
  • Use bots, scripts, automated agents, or similar technologies to access or interact with MyEnroll360 without BAS' prior written authorization;
  • Conduct penetration testing, vulnerability scanning, security testing, or similar activity without BAS' prior written authorization;
  • Circumvent authentication, access controls, geographic restrictions, usage restrictions, or security measures;
  • Introduce malware, viruses, malicious code, or harmful technologies;
  • Interfere with, overload, disrupt, damage, or degrade MyEnroll360 or related systems;
  • Use BAS Materials to develop, train, improve, benchmark, or support a competing product or service without BAS' prior written authorization;
  • Use MyEnroll360 for fraudulent, unlawful, abusive, harassing, or unauthorized purposes;
  • Access another person's information out of curiosity or for a purpose unrelated to authorized responsibilities; or
  • Assist another person in engaging in prohibited conduct.

Unauthorized use of MyEnroll360 or BAS Materials may cause irreparable harm. BAS may seek injunctive or other equitable relief in addition to any other remedies available under law or contract.

  1. Reporting Security Vulnerabilities

If you believe you have discovered a security vulnerability affecting MyEnroll360 or related BAS systems, please report it to security@basusa.com. Please include a description of the vulnerability and the steps needed to reproduce it. Do not access, modify, or disclose data belonging to others in the course of identifying or reporting a vulnerability. BAS will review reports submitted in good faith and may follow up for additional information.

This reporting channel does not authorize penetration testing, vulnerability scanning, or other security testing described in Section 11 above; such activity still requires BAS' prior written authorization.

  1. Geographic Access Restrictions

MyEnroll360 is intended for authorized access within the United States. Access from outside the United States is prohibited unless BAS has approved a limited exception.

You may not use a virtual private network, proxy server, anonymizing technology, location-masking technology, or other method to circumvent geographic restrictions or make access appear to originate from an authorized location.

BAS may monitor access attempts and may block, restrict, challenge, or suspend access based on geographic location, IP address, network characteristics, security risk, contractual requirements, or other relevant factors.

Any exception to geographic access restrictions must be approved through BAS' applicable authorization process and may be subject to additional conditions or security requirements.

  1. S. Services and Data

MyEnroll360 is designed and operated for the administration of employee benefit plans, insurance programs, and related administrative services within the United States. Unless BAS has expressly agreed otherwise in a separate written agreement, MyEnroll360 is not intended to collect, receive, store, process, or otherwise handle personal information subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the United Kingdom GDPR, or other substantially similar non-U.S. privacy laws.

Users shall not knowingly submit, upload, or otherwise provide information subject to such laws unless BAS has expressly agreed in writing to accept and process such information.

BAS may reject, suspend, delete, or otherwise decline to process information that BAS reasonably believes is subject to such laws or is otherwise inconsistent with the intended use of MyEnroll360.

  1. Third-Party Information, Services, and Links

MyEnroll360 may display, transmit, receive, or provide access to information, content, products, services, or links involving third parties, including employers, associations, trusts, plan sponsors, insurers, brokers, benefit providers, payroll providers, payment processors, and other vendors.

The inclusion or availability of third-party information, content, or links does not necessarily constitute BAS' endorsement of the third party or its products or services.

BAS is not responsible for independent third-party websites or services and does not control their privacy, security, availability, accuracy, or business practices.

  1. Administrative and Informational Role

MyEnroll360 is an administrative and informational platform. Information available through MyEnroll360 may be based on information received from users, employers, associations, trusts, plan sponsors, insurers, brokers, carriers, payroll providers, vendors, and other third parties.

BAS does not guarantee the accuracy or completeness of third-party information and may rely on information provided by authorized sources without independent verification.

Unless expressly agreed by BAS in a separate written agreement, BAS does not:

  • Sponsor or insure a benefit plan;
  • Determine eligibility for benefits or coverage;
  • Make claim determinations;
  • Provide legal, tax, medical, investment, or financial advice;
  • Interpret plan documents on behalf of a plan sponsor;
  • Guarantee insurance coverage, benefit payments, claim outcomes, or carrier processing; or
  • Undertake discretionary authority or responsibility for plan management, plan assets, benefit determinations, or interpretation of plan terms.

Nothing in these Terms is intended to confer fiduciary status upon BAS under the Employee Retirement Income Security Act of 1974 ("ERISA") or other applicable law.

Applicable plan documents, insurance contracts, certificates of coverage, summary plan descriptions, program terms, and other governing materials control over information displayed through MyEnroll360 in the event of a conflict.

  1. Electronic Transactions and Communications

MyEnroll360 may permit users to submit elections, instructions, acknowledgments, requests, payments, or other transactions electronically.

You are responsible for reviewing information before submitting an electronic transaction. BAS may rely on transactions and instructions submitted through authenticated user accounts as authorized, subject to applicable law, contractual requirements, and BAS' security procedures.

BAS may provide notices, confirmations, alerts, or other communications electronically through MyEnroll360, email, or other available channels. Nothing in these Terms is intended to replace any separate consent required by applicable law for electronic furnishing or delivery of particular documents or notices.

  1. Monitoring, Audit, and Security Review

BAS may monitor, log, record, and audit access to and use of MyEnroll360 for purposes including:

  • Security monitoring;
  • Fraud prevention;
  • Investigation of suspected misuse;
  • Access control;
  • Compliance;
  • System performance;
  • Troubleshooting;
  • Audit support;
  • Enforcement of these Terms; and
  • Protection of BAS, its clients, users, systems, and information.

Users should have no expectation that activity conducted within MyEnroll360 is exempt from authorized security, compliance, or operational monitoring.

  1. Suspension, Restriction, and Termination of Access

BAS may suspend, restrict, challenge, or terminate access to MyEnroll360 when reasonably necessary to:

  • Protect security or system integrity;
  • Investigate suspected unauthorized activity or misuse;
  • Respond to suspected credential compromise;
  • Enforce these Terms;
  • Comply with law, regulation, court order, or governmental request;
  • Follow authorized instructions from an applicable organization;
  • Address changes in eligibility or authorization for access;
  • Respond to contractual requirements;
  • Protect BAS, its clients, users, or third parties; or
  • Address other material operational or security concerns.

BAS may take such action with or without prior notice when circumstances reasonably require immediate action.

Termination of access does not necessarily require deletion of information. BAS may retain, archive, return, or delete information in accordance with applicable law, contractual requirements, client instructions where applicable, and BAS' record retention practices.

  1. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AND EXCEPT AS EXPRESSLY PROVIDED IN A SEPARATE WRITTEN AGREEMENT WITH BAS, MYENROLL360 AND BAS MATERIALS ARE PROVIDED "AS IS" AND "AS AVAILABLE."

BAS DISCLAIMS WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, TO THE MAXIMUM EXTENT PERMITTED BY LAW.

BAS DOES NOT WARRANT THAT MYENROLL360 WILL BE UNINTERRUPTED, ERROR-FREE, COMPATIBLE WITH EVERY DEVICE OR SOFTWARE CONFIGURATION, OR FREE FROM ALL SECURITY THREATS.

BAS DOES NOT WARRANT THAT INFORMATION DISPLAYED THROUGH MYENROLL360 REFLECTS REAL-TIME ELIGIBILITY, ENROLLMENT, COVERAGE OR PAYMENT STATUS.

Nothing in this section limits obligations expressly undertaken by BAS in a separate written agreement or obligations that cannot lawfully be disclaimed.

  1. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, BAS AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AFFILIATES, CONTRACTORS, AND LICENSORS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES ARISING FROM OR RELATING TO ACCESS TO OR USE OF, OR INABILITY TO ACCESS OR USE, MYENROLL360.

Where a separate written agreement with BAS governs the applicable services or relationship, BAS' liability with respect to matters governed by that agreement will be determined under that agreement.

Nothing in these Terms excludes or limits liability to the extent such liability cannot lawfully be excluded or limited.

  1. User Responsibility and Indemnification

To the extent permitted by applicable law, you agree to indemnify and hold harmless BAS and its officers, directors, employees, and affiliates from third-party claims, damages, liabilities, and reasonable costs and attorneys' fees arising from your:

  • Misuse of MyEnroll360;
  • Unauthorized access to or disclosure of information;
  • Submission of information without appropriate authority.;
  • Violation of applicable law;
  • Infringement of third-party rights; or
  • Material breach of these Terms.

This section does not require an individual user to indemnify BAS merely because the individual properly uses MyEnroll360 for authorized benefits enrollment, administration, payment, or other permitted purposes.

  1. Availability and Compatibility

MyEnroll360 is designed for supported technologies and may not function properly with outdated, unsupported, or incompatible devices, browsers, operating systems, networks, or software.

BAS may modify, update, maintain, suspend, or discontinue features or functionality as reasonably necessary for security, operations, legal compliance, service delivery, or other legitimate purposes.

BAS does not guarantee uninterrupted availability of MyEnroll360.

  1. Changes to These Terms

BAS may update these Terms from time to time to reflect changes in MyEnroll360, services, technologies, security practices, business operations, or legal requirements.

Updated Terms will be made available with a revised effective date. Users must accept revised Terms before continuing to access MyEnroll360.

Continued access or use after revised Terms become effective constitutes acceptance to the extent permitted by applicable law and consistent with the method by which the revised Terms are presented.

  1. Governing Law and Forum

These Terms are governed by the laws of the Commonwealth of Pennsylvania, without regard to conflict-of-law principles.

Subject to applicable law and any governing written agreement with BAS, any legal action arising from these Terms shall be brought in the state courts of competent jurisdiction located in Montgomery County, Pennsylvania, or the United States District Court for the Eastern District of Pennsylvania, as applicable.

  1. Severability

If any provision of these Terms is found invalid or unenforceable, the remaining provisions will remain in effect to the fullest extent permitted by law. Any invalid or unenforceable provision will be interpreted or modified to the minimum extent necessary to make it enforceable where permitted.

  1. No Waiver

BAS' failure to exercise or enforce any right or provision of these Terms does not constitute a waiver of that right or provision.

  1. Contact Information

For questions about the Terms of Use, please contact:

Benefit Allocation Systems, LLC
Attn: General Counsel
P.O. Box 62407
King of Prussia, PA 19406

Email: compliance@BASusa.com

Updated: July 27, 2026

Copyright © 2026 Benefit Allocation Systems, LLC. All rights reserved.

BAS SFTP SITE TERMS OF USE

Benefit Allocation Systems, LLC (“BAS”) provides a Secure File Transfer Protocol site (“SFTP site”) designed to securely transfer information between BAS and User. By accessing the SFTP site, User agrees to the terms and conditions set forth herein. USER MAY NOT ACCESS, VIEW OR USE ANY MATERIAL, INFORMATION, PRODUCTS OR SERVICES AVAILABLE ON OR THROUGH THE SFTP SITE UNLESS USER FIRST AGREES TO THESE TERMS. 

Services

BAS’ SFTP site allows Users to send to and receive files from authorized parties. All transactions through the SFTP site are strictly limited to matters relating to the administrative services identified in the contracting documents between BAS and the Client on whose behalf the User accesses the SFTP site. The terms and conditions of services are set forth in an agreement between BAS and the Client. All Users of the SFTP site agree to act within the scope of the agreement between BAS and the Client and are responsible for the proper management and safe-keeping of all information received through the SFTP site.

User Names, Passwords and Accessibility

Each User will be assigned a user ID and password providing access to a specified folder on the SFTP site. Each User is required to keep login credentials confidential and not share credentials with any other person. User will inform BAS promptly of any unauthorized use of user ID or password and will be solely responsible for all activities occurring under User’s ID and password. User must notify BAS promptly in the event User no longer needs access to the site. User agrees that User or a representative of the Client will notify BAS immediately in the event User terminates employment with the Client. User may not use SFTP access credentials, attempt to access the SFTP site, or download any files from the site if User is no longer employed with the Client.

Materials

By providing information to the SFTP site, User represents that User has the full legal right to provide the information and that use of the information will not: (a) infringe any intellectual property rights of any person or entity or any rights of publicity, personality, or privacy of any person or entity, including, without limitation, as a result of User’s failure to obtain consent to post personally identifying or otherwise private information about a person; (b) violate any law, statute, ordinance, or regulation; (c) contain any viruses, Trojan horses, worms, time bombs, cancelbots, or other computer programming routines that damage, detrimentally interfere with, surreptitiously intercept, or expropriate any system, data or personal information, or that facilitate or enable such or that are intended to do any of the foregoing; or (d) constitute disclosure of any trade secret or other confidential information owned by any third party.

User agrees to download any files placed on the SFTP site for User’s access within five (5) business days of receiving notice of the availability of the files. Data remaining in the User folder on the SFTP site after thirty (30) days may be deleted and may not be able to be recovered. Any request to replicate data (which may or may not be possible) will be subject to additional charge.

Confidentiality

Information on the SFTP site may contain protected health information (PHI), personally identifiable information (PII), trade secrets or other proprietary information. After downloading such information. User will apply appropriate privacy, security and confidentiality protections commensurate with protections it would apply to Client information of like character. User understands that once the information is downloaded from the SFTP site, such material is no longer protected and BAS disclaims all actions with respect to the use or disclosure of such information. When User uploads information to the SFTP site that contains PHI, User agrees to provide only the minimum amount necessary to accomplish the service objectives.

Proprietary Rights

As between User and BAS, BAS shall own all right, title, and interest in and to information uploaded by BAS to the SFTP site (“BAS Materials”), including but not limited to algorithms, tools, data, software, specifications, documentation, reports and other work product developed or provided by BAS in connection with performing services. BAS wons all intellectual property rights to and modifications, improvements and derivatives thereof to BAS Materials uploaded by BAS to the SFTP site. BAS Materials may be protected pursuant to United States copyright, trademark, patent and other applicable laws. Under no circumstances will User have any rights of any kind in or to the BAS Materials, other than the right to use the BAS Materials in accordance with these terms and the terms of the services agreement between the Client and BAS.

Unauthorized Activities

User shall not (a) sell, rent, display, sublicense, summarize, or otherwise provide any BAS Materials to any other person or entity; (b) refer to, reproduce, distribute, make available, or use any item of the BAS Materials as part of any effort to develop any service or product having any characteristics, attributes, expressions, or quality similar to the services or products provided by BAS or to compete with BAS; (c) reverse engineer, copy, modify, create derivative works, alter, maintain, enhance, remove, or replace data or otherwise modify copyrights BAS Materials; or (d) make any unauthorized use or disclosure of any BAS Materials. User acknowledges and agrees that the unauthorized use of BAS Materials that are copyrights or proprietary could cause irreparable harm to BAS and that in the event of such unauthorized use, BAS shall be entitled to an injunction in addition to any other remedies available at law or in equity. BAS reserves the right to audit and electronically monitor User’s use of the SFTP site.

Disclaimer

The information provided by BAS through the SFTP site is for informational purposes only. BAS is not responsible for and does not guarantee the accuracy or completeness of any information uploaded by BAS to the SFTP site. Use of information in the SFTP site is not intended to be a substitute for professional legal, medical, financial or coverage advice.

BAS MATERIALS, DATA, SERVICES, PRODUCTS, INFORMATION IN AND MADE AVAILABLE THROUGH THE SFTP SITE IS MADE AVAILABLE “AS IS” AND “WITH ALL FAULTS” AND AT USER’S OWN RISK. BAS AND ITS LICENSORS MAKE NO REPRESENTATIONS OR WARRANTIES, AND DISCLAIM ALL REPRESENTATIONS AND WARRANTIES, WITH RESPECT TO BAS MATERIALS, DATA AND OTHER SERVICES, PRODUCTS AND MATERIALS ON, IN AND MADE AVAILABLE THROUGH THE SFTP SITE, EXPRESS OR IMPLIED, WRITTEN OR ORAL, ARISING FROM COURSE OF DEALING, COURSE OF PERFORMANCE, USAGE OF TRADE, OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

BAS AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, EXEMPLARY, EXTRA-CONTRACTUAL, OR PUNITIVE DAMAGES OF ANY KIND WHATSOEVER, INCLUDING, WITHOUT LIMITATION, LOST REVENUES OR LOST PROFITS, WHICH MAY OR DO RESULT FROM THE USE OF, ACCESS TO, OR INABILITY TO USE THE SFTP SITE, SERVICES, PRODUCTS, DATA AND OTHER MATERIALS ON, IN AND MADE AVAILABLE THROUGH THE SFTP SITE, REGARDLESS OF LEGAL THEORY, WHETHER OR NOT USER OR BAS HAD BEEN ADVISED OF THE POSSIBILITY OR PROBABILITY OF SUCH DAMAGES, AND EVEN IF THE REMEDIES OTHERWISE AVAILABLE FAIL OF THEIR ESSENTIAL PURPOSE. UNDER NO CIRCUMSTANCES WILL THE TOTAL LIABILITY OF BAS AND ITS LICENSORS TO USER OR ANY OTHER PERSON OR ENTITY IN CONNECTION WITH, BASED UPON, OR ARISING FROM THE SFTP SITE, SERVICES, PRODUCTS, DATA OR OTHER MATERIALS OFFERED IN CONNECTION THEREWITH EXCEED TEN DOLLARS ($10). SOME STATES DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY TO USER. IF ANY PART OF THIS LIMITATION ON LIABILITY IS FOUND TO BE INVALID OR UNENFORCEABLE FOR ANY REASON, THEN THE TOTAL LIABILITY OF BAS AND ITS LICENSORS SHALL NOT EXCEED FIFTY DOLLARS ($50).

Changes to Terms; Termination

BAS may, at any time, terminate any User’s access to the SFTP site and/or terminate the SFTP site.

BAS also reserves the right to modify, alter or update these Terms of Use. It is User’s obligation to review any new or revised Terms of Use, and use of the SFTP site following any changes means that User agrees to follow and be bound by the revised Terms of Use.

Governing Law

These Terms of Use shall be governed by the laws of the Commonwealth of Pennsylvania, without regard to any rules of conflict or choice of laws which require the application of laws of another jurisdiction. In the event of a dispute between User and BAS, User irrevocably and unconditionally: (i) agrees that any suit, action or other legal proceeding arising out of this agreement may be brought in any court in the geographic area covered by the Eastern District of Pennsylvania; (ii) consents to the jurisdiction of any such court in any such suit, action or proceeding; and (iii) waives any objection which User may have to the laying of venue of any such suit, action or proceeding in any such court. THE TERMS OF ANY APPLICABLE LAW NOW OR HEREAFTER ENACTED THAT IS BASED ON, DERIVED FROM, SIMILAR TO, OR CONNECTED WITH THE UNIFORM COMPUTER INFORMATION TRANSACTIONS ACT DRAFTED BY THE NATIONAL CONFERENCE OF COMMISSIONERS ON UNIFORM STATE LAWS SHALL NOT APPLY EXCEPT TO THE EXTENT THAT THE LAW EXPRESSLY PROHIBITS ALTERATION BY THESE TERMS OF THE APPLICABILITY OF ONE OR MORE SECTIONS OF THE LAW.

Force Majeure 

Notwithstanding anything to the contrary in these Terms of Use, neither party will be deemed to be in default of any provision of the Terms of Use for any delay, error, failure, or interruption of performance due to any act of God, terrorism, war, insurrection, riot, boycott, strike, or other labor or civil disturbance, interruption of power service, interruption of communications services, problems with the Internet, epidemic, act of any other person not under the control or direction of such party, or other similar cause. The party subject to any of the foregoing events shall give the other party reasonable written notification of any resulting material or indefinite delay.

 

SFTP Site Terms of Use Version 6.2020

Contact Us
Client Services

Operating Hours
Client Services Hours
Monday - Friday, 8:30 AM - 5:00 PM, Eastern Time.

Phone
Client Services Phone Number

Email
Client Services Email
You already have active session. Would you like to continue?