Question 1

Is Latent Inc SOC 2 compliant?

Accepted Answer

Latent Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Latent Inc HIPAA compliant?

Accepted Answer

According to Latent Inc's public trust center, Latent Inc is HIPAA compliant. On SOC2C this listing is Listed.

Question 3

Is Latent Inc SOC 2 Type I or Type II?

Accepted Answer

Latent Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use Latent Inc's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Latent Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is Latent Inc penetration tested?

Accepted Answer

Latent Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Can I get Latent Inc's SOC 2 report?

Accepted Answer

Latent Inc's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Question 7

Is Latent Inc secure?

Accepted Answer

Security isn't a single yes/no, but Latent Inc is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does Latent Inc have a bug bounty or vulnerability disclosure program?

Accepted Answer

Latent Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@latenthealth.com or via a /security page (Latent Inc lists a security contact).

Question 9

Who are Latent Inc's subprocessors?

Accepted Answer

Latent Inc's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Question 10

Where does Latent Inc host or store data?

Accepted Answer

Latent Inc's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 11

Where is Latent Inc's trust center or security page?

Accepted Answer

Latent Inc's trust center is at https://security.latenthealth.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

What are Latent’s core security principles?

Accepted Answer

Operating in the healthcare world, security is fundamental to our business and core to every decision we make. We take the protection of patient data incredibly seriously, which is why, outside of payroll, cybersecurity software is our largest operating expense. We leverage Vanta to automatically scan across our development and production environments to ensure continuous monitoring and compliance. Beyond meeting industry certifications and standards, we strive to maintain the most robust security posture possible.

Question 13

How does Latent integrate with EMR systems, like Epic and Cerner?

Accepted Answer

Latent is a SMART on FHIR app that leverages the FHIR APIs to interact with EMR servers and retrieve patient information (e.g. demographics, chart notes, medications, labs, media, etc.).

Question 14

How does Latent utilize AI in its technology?

Accepted Answer

Latent leverages state-of-the-art medical language models that can retrieve and present the most relevant information from the unstructured text in order for pharmacists and technicians to complete their authorization. Latent focuses on directing users to the relevant clinical information, using an evidence-based approach and human-in-the-loop workflow.

Question 15

Do you encrypt data at rest?

Accepted Answer

All data is encrypted in-transit and at-rest using up-to-date encryption protocols (AES 256, TLS 1.3).

Latent Inc

About

Compliance & infrastructure

Documents

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked