Vitamin Software SOC 2 status and provider evidence

y for Economic and Clinical Health Act of 2009. It was created to motivate the implementation of electronic health records (EHRs) in the US. It expanded the protections imposed by HIPAA to cover business associates, which became responsible for protecting PHI. Vitamin’s engineering team abides by high healthcare security standards when working with all entities in the industry. PPACA PPACA is the Patient Protection and Affordable Care Act of

ies and lose their HIPAA compliance status. PCI DSS v4.0 is the latest iteration of the standard. We follow it for all software that requires an integration with a payment system. ISO 27001 is the leading standard for data security, issued by the International Organization for Standardization. It defines the requirements an information security management system must meet. The goals are cyber-resilience, risk management, and operational excellen

ns to let authorized individuals access it. We identify and address vulnerabilities before launch and stay up-to-date with relevant publications, like the latest NIST HIPAA guide. PCI DSS is the Payment Card Industry Data Security Standard. It covers four security areas: network and system, physical access controls, policies and procedures, and monitoring and testing. Created by major card brands in 2004, it’s now the gold standard for keeping

ngineers use NIST principles as guidelines to build secure apps and platforms. We’ve discussed the latest NIST guide on HIPAA implementation in a separate post, so give it a look. SOC 2 is the Service Organization Control Type 2. It’s a cybersecurity compliance framework by the American Institute of Certified Public Accountants (AICPA). It ensures third-party providers securely store and process sensitive data shared by providers. When a ven