Your Data Is Protected, Always

Security Certificates

• 

  ISO 27001: 2022 Certificate

  The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers and data centers are securely managed. These certifications run for 3 years (renewal audits) and have annual surveillance audits to confirm compliance of Planful Information Security Management Framework (ISMF).

  Read more
• 

  ISO 27701: 2019 Certificate

  The International Organization for Standardization 27701 Standard (ISO 27701) is a privacy extension to ISO 27001. The design goal is to enhance the existing Information Security Management System (ISMS) with additional requirements to establish, implement, maintain and continually improve a Privacy Information Management System (PIMS). The standard outlines a framework for Personally Identifiable Information (PII) Controllers and PII Processors to manage privacy controls.

  Read more
• 

  SOC1 Type 2

  The American Institute of Certified Public Accounts (AICPA) Service Organization Controls (SOC) reports give assurance over control environments as they relate to the retrieval, storage, processing, and transfer of data. The reports cover IT General Controls for availability, confidentiality and security of customer data. The SOC1 reports cover controls that are relevant for the financial reporting of customers. The Type 2 report is a review of the fairness of the presentation of management description of the service organization’s system and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives included in the description throughout the specified period.

  Read more
• 

  SOC2 Type 2

  The American Institute of Certified Public Accounts (AICPA) Service Organization Controls (SOC) reports give assurance over control environments as they relate to the retrieval, storage, processing, and transfer of data. The SOC2 reports cover controls for security, availability and confidentiality of customer data. These reports are intended to meet the needs of a broad range of user organizations that need detailed information and assurance about the controls at a service organization relevant to security, availability and processing integrity of the systems the service organization uses to process user organization’s data and confidentiality and privacy of the information processed by these systems. A type 2 report on management’s description of a service organization’s system and suitability of the design and operating effectiveness of controls.

  Read more
• 

  HIPAA Business Associate Addendum (HIPAA BAA)

  A “business associate” is a person or entity that performs certain functions or activities that involve the use or disclosure of protected health information on behalf of, or provides services to, a covered entity. Business associate functions and activities include claims processing or administration, data analysis, processing or administration, utilization review, quality assurance, billing, benefit management, practice management and reporting. Business associate services are legal, actuarial, accounting, consulting, data aggregation, management, management, administrative, accreditation and financial.

  Read more