Trust Center

Compliance status

• Business Associate Agreement (BAA) on every plan
• Built for the HIPAA Security Rule; risk assessment with the HHS Security Risk Assessment Tool in progress
• Aligning with NIST SP 800-66 Rev. 2 (HIPAA Security Rule guidance)
• Pursuing ONC Health IT certification
• Hosted on enterprise cloud infrastructure certified to ISO 27001 and SOC 2

Sub-processors

We use a small number of carefully chosen sub-processors for:

• Cloud hosting
• AI features
• Electronic claims, eligibility and remittance

Every sub-processor that touches patient data is under a Business Associate Agreement. The full list is provided with your BAA, or on request.