Security & Compliance

Understanding Our Security Framework

HITRUST

HITRUST is a widely recognized security framework and certification program that helps organizations manage information risk, protect sensitive data, and demonstrate compliance with regulations, including HIPAA and NIST. It is considered the gold standard for vendor risk management in healthcare. 

SOC 2 Type 2

A SOC 2 Type 2 report is an independent, auditor-verified report confirming that a service organization’s security controls are designed correctly and operate effectively over time. It evaluates systems against AICPA trust criteria: security, availability, processing integrity, confidentiality, and privacy. 

NIST

NIST standards are guidelines and frameworks developed by the National Institute of Standards and Technology to ensure security, interoperability, and measurement accuracy across industries. NIST is best known for its authoritative cybersecurity frameworks that help organizations manage risk and protect data. 

HIPAA

HIPAA regulations are designed to protect sensitive patient health information from unauthorized disclosure, requiring covered entities to implement strict administrative, physical, and technical safeguards. Key components include the Privacy Rule, Security Rule, and Breach Notification Rule.