Is this your company? Buyers are checking Healthyr here. Claim healthyr.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Healthyr
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Healthyr is SOC 2 Type II compliant. Healthyr also holds HIPAA, PCI DSS, and HITRUST.
About
Healthyr offers a host of digital health & wellness tools that make at-home health care easy, affordable, & accessible.
Compliance & infrastructure
Hosting
AWS
Data handled
Customer personally identifiable informationEmployee personally identifiable informationPersonal health information
Subprocessors
6- AAmazon Web Services · Cloud provider
- GGoogle Workspace · Identity provider
- JJamf · IT
- 11Password · Password management
- VVanta · Security
- GGitHub · Version control
Compliance leadership
The person who leads Healthyr's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Healthyr's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Healthyr SOC 2 compliant?
Healthyr is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Healthyr HIPAA compliant?
According to Healthyr's public trust center, Healthyr is HIPAA compliant. On SOC2C this listing is Listed.
Is Healthyr PCI DSS compliant?
According to Healthyr's public trust center, Healthyr is PCI DSS compliant. On SOC2C this listing is Listed.
Is Healthyr HITRUST certified?
According to Healthyr's public trust center, Healthyr is HITRUST certified. On SOC2C this listing is Listed.
Is Healthyr SOC 2 Type I or Type II?
Healthyr is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Healthyr's SOC 2 for a vendor risk assessment?
Yes. Healthyr's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Healthyr penetration tested?
Healthyr hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Healthyr secure?
Security isn't a single yes/no, but Healthyr is SOC 2 Type II compliant and holds HIPAA, SOC 2 Type II, PCI DSS, HITRUST. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Healthyr have a bug bounty or vulnerability disclosure program?
Healthyr hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@healthyr.com or via a /security page (Healthyr lists a security contact).
Who are Healthyr's subprocessors?
Healthyr lists 6 subprocessors on its trust center, including Amazon Web Services, Google Workspace, Jamf, 1Password, Vanta. Buyers use this for fourth-party risk review.
Where does Healthyr host or store data?
Healthyr hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Personal health information. Data residency details are on its trust center.
Where is Healthyr's trust center or security page?
Healthyr's trust center is at https://security.healthyr.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Healthyr
Reproduced from Healthyr's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
How is our digital health platform designed to ensure HIPAA compliance?
Our platform employs robust encryption measures to safeguard patient data and ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA). We implement industry-standard security protocols to protect electronic health records (EHRs) and maintain the confidentiality of sensitive information.
What security measures are in place to protect patient data during transmission and storage?
We utilize secure communication channels and encryption protocols to safeguard the transmission of health records. Additionally, data at rest is encrypted, ensuring that patient information remains secure throughout its lifecycle within our system.
Can you elaborate on the access controls in place to restrict unauthorized access to health records?
Our platform implements strict access controls, including role-based access and multi-factor authentication, to limit system access to authorized personnel only. This ensures that healthcare providers and staff can access only the information necessary for their roles.
How do we ensure the integrity and authenticity of health records within the platform?
We employ advanced data integrity measures, such as digital signatures and audit trails, to guarantee the authenticity of health records. This helps in tracking any changes made to the data and ensuring its accuracy over time.
What steps are taken to monitor and detect potential security incidents or breaches?
Our platform incorporates continuous monitoring and automated threat detection systems to promptly identify and respond to any potential security incidents. This proactive approach allows us to mitigate risks and maintain the integrity of the health records.
How is our platform compliant with SOC 2 standards for security, availability, and confidentiality?
Our system adheres to the SOC 2 framework, meeting stringent standards for security, availability, processing integrity, confidentiality, and privacy. We undergo regular audits to validate our compliance and ensure that our security controls are consistently effective.
What measures are in place to protect against unauthorized physical access to data centers or servers hosting health records?
Physical access to our data centers is strictly controlled and monitored. Security measures include biometric authentication, surveillance systems, and restricted access zones to prevent unauthorized entry and protect the physical infrastructure hosting health records.
How do we handle data backups and ensure the availability of health records in the event of a system failure or disaster?
We implement robust backup procedures and disaster recovery plans to ensure the availability and continuity of health records. Regularly tested backup systems help us quickly restore data in the event of system failures or unforeseen incidents.
Can you provide details on the training and awareness programs for employees regarding data security and privacy?
Our employees undergo comprehensive training programs to instill a strong understanding of data security and privacy best practices. Regular updates and awareness initiatives are conducted to ensure that the team remains vigilant and compliant with industry standards.
How do we handle the secure disposal of health records when they are no longer needed?
We follow industry best practices for the secure disposal of health records, ensuring that data is permanently and irreversibly deleted when it is no longer required. This includes the use of secure deletion methods and adherence to data retention policies to protect patient privacy.
Healthcare peers that completed SOC 2
Ambiencehealthcare
ambiencehealthcare.com · Healthcare
SOC 2 Type IIRenewal not public
Elfie
elfie.co · Healthcare
SOC 2 Type IIRenewal not public
Vitablehealth
vitablehealth.com · United States · Healthcare
SOC 2 Type IIRenewal not public
ThoughtFull World
thoughtfull.world · Healthcare
Renewal not public