SOC2C

Is this your company? Buyers are checking Heidi Health Trading Pty Ltd here. Claim heidihealth.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free
Heidi Health Trading Pty Ltd logo

Heidi Health Trading Pty Ltd

Trust level
Listed
Unverified

Sourced from public information. Not yet verified by the company.

Heidi Health Trading Pty Ltd is SOC 2 Type II compliant. Heidi Health Trading Pty Ltd also holds ISO 27001, ISO 42001, HIPAA, GDPR, and PIPEDA.

Framework
Auditor
Last report
Renewal
View official trust center ↗

About

Heidi health is a healthcare technology firm focused on developing AI-driven automation solutions aimed at reducing administrative burdens for physicians and enhancing their operational capabilities. Utilizing advanced natural language processing and machine learning techniques, our platform automates key processes such as patient data documentation, template management, management plan creation and billing procedures. This enables medical professionals to devote more attention to patient care. Our solutions are crafted for ease of use and portability so healthcare practitioners can take their

Compliance & infrastructure

Hosting
AWSGCP
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information

Documents

3

Subprocessors

10
  • A
    Amazon Web Services · Cloud provider
  • S
    Stripe · Finance and payments (No PHI)
  • G
    Google Cloud Platform (GCP) · Cloud Storage and Processing
  • H
    HubSpot · Customer Engagement Platform (No PHI)
  • A
    Auth0 · Identiy Management (No PHI)
    Various (regionalised for users)
  • P
    Posthog · Analytics (No PHI)
  • D
    Datadog · Observability monitoring (No PHI)
  • I
    Intercom · Customer support (No PHI)
  • G
    Google Workspace · Cloud Storage and Processing (No PHI)
  • O
    Omni Analytics · Data analytics (No PHI)

Compliance leadership

The person who leads Heidi Health Trading Pty Ltd's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Heidi Health Trading Pty Ltd's penetration test vendor isn't listed yet.

Claim this profile to add it.

Recent updates

Cyber Essentials Plus certificationJul 2025

We’re proud to share that Heidi is now Cyber Essentials Plus certified. Cyber Essentials Plus is a UK government-backed certification that involves a hands-on technical audit of our systems to confirm that essential security controls are in place and functioning effectively. This includes real-world testing of our defences against common cyber threats such as malware, phishing, and unauthorised access. This certification builds on our existing ISO27001, SOC 2 Type II, ISO9001, GDPR and HIPAA compliance frameworks, and is another step forward in our commitment to protecting sensitive health information and maintaining best-in-class security practices. For questions about our security and compliance posture, or to request a copy of our latest certification reports, please contact us at compliance@heidihealth.com.

New NHS England Guidance on the Use of Ambient Voice TechnologyApr 2025

NHS England has just released pivotal guidance on using AI-enabled ambient scribing products (https://www.england.nhs.uk/long-read/guidance-on-the-use-of-ai-enabled-ambient-scribing-products-in-health-and-care-settings/) in healthcare. At Heidi, we're genuinely excited to see this guidance because it provides clear, practical steps for healthcare teams keen to embrace AI responsibly and effectively. Here's an approachable breakdown of what this guidance involves, alongside practical tips for healthcare providers—and importantly, how Heidi supports you every step of the way: 1. Clinical Safety and Risk Management (DCB0160 Compliance) - What You Need to Do: Assign a Clinical Safety Officer and complete your own DCB0160 clinical safety assessment, documenting potential risks and outlining clear mitigations. - How Heidi Helps: Heidi has thoroughly completed our DCB0129 clinical safety assessments, and our detailed documentation can support you in preparing your own DCB0160. Our team collaborates closely with your clinical safety officers, providing guidance and support every step of the way. 2. Data Protection Impact Assessment (DPIA) - What You Need to Do: Conduct your own DPIA to clearly identify and mitigate any privacy risks, ensuring patient data is handled securely and transparently. - How Heidi Helps: Our team has compiled all necessary documentation, examples, and…

Heidi is now ISO 9001 certified!Apr 2025

We’re proud to share that Heidi is now ISO 9001 certified—ISO 9001 is an internationally recognised standard for quality management systems. This certification reflects our commitment to delivering a consistently high-quality, reliable product and ensuring continuous improvement across all aspects of our operations. For our healthcare partners, ISO 9001 provides assurance that Heidi is built and supported through comprehensive, accountable processes that prioritise safety, customer satisfaction, and service excellence.

NHS Compliance documents availableMar 2025

We are committed to supporting safe, responsible, and compliant adoption within NHS settings. All NHS clinicians, practice managers, and data protection professionals can request access to the key documentation required to bring Heidi into your practice, including: - DCB0129 Clinical Risk Management Compliance - DPIA - Digital Technology Assessment Criteria (DTAC) To request access, please visit our Trust Centre (https://trust.heidihealth.com/) and scroll down to the Resources section in the bottom-left corner. From there, you can submit a request for the relevant documents. Our compliance team will review your request and provide access as appropriate.

Cut the Paperwork: How AI Scribes Are Transforming Patient CareOct 2024

Clinicians are overwhelmed by the growing burden of documentation, with administrative tasks outpacing patient care. Despite technological advancements, such as EMRs and digital dictation, these solutions have often created more challenges than they’ve solved. AI medical scribes offer a promising way forward, providing real-time support by documenting patient consultations seamlessly. As regulators begin to release public guidance on the safe use of technologies like AI scribes, concerns around safety and trust are gradually being addressed. At Heidi, we prioritize transparency, ensuring clinicians understand how to use AI scribes effectively and securely. Discover how Heidi’s trusted AI solution empowers clinicians to reclaim their time, reduce burnout, and enhance patient care in a safe manner. See our full article here - https://www.heidihealth.com/blog/using-ai-medical-scribes-safely

This listing is partial

7/11 details · 64%

SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

  • Auditorraises trust
    Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
  • Report dateraises trust
    Add your most recent report period so buyers see how current your SOC 2 is.
  • Renewal date
    Add your renewal window so buyers know your coverage is active.
  • Security controls
    Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Heidi Health Trading Pty Ltd SOC 2 compliant?
Heidi Health Trading Pty Ltd is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Heidi Health Trading Pty Ltd ISO 27001 certified?
According to Heidi Health Trading Pty Ltd's public trust center, Heidi Health Trading Pty Ltd is ISO 27001 certified. On SOC2C this listing is Listed.
Is Heidi Health Trading Pty Ltd ISO 42001 certified?
According to Heidi Health Trading Pty Ltd's public trust center, Heidi Health Trading Pty Ltd is ISO 42001 certified. On SOC2C this listing is Listed.
Is Heidi Health Trading Pty Ltd HIPAA compliant?
According to Heidi Health Trading Pty Ltd's public trust center, Heidi Health Trading Pty Ltd is HIPAA compliant. On SOC2C this listing is Listed.
Is Heidi Health Trading Pty Ltd GDPR compliant?
According to Heidi Health Trading Pty Ltd's public trust center, Heidi Health Trading Pty Ltd is GDPR compliant. On SOC2C this listing is Listed.