Is this your company? Buyers are checking MedaSystems here. Claim medasystems.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
MedaSystems
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
MedaSystems is SOC 2 Type II compliant. MedaSystems also holds HIPAA, and GDPR.
About
Welcome to the MedaSystems Trust Center. This is your one-stop hub for understanding how MedaSystems prioritizes security, privacy, and compliance. Here, you’ll find details about our security practices, compliance certifications, privacy policies, and ongoing initiatives to safeguard your data. Our mission is to empower our customers with transparency and confidence in the way we protect and manage information. Explore the sections below to learn more about our commitment to trust and security.
Compliance & infrastructure
Hosting
AWS
Documents
14Documents
- MedaSystems HIPAA AssessmentRequest
- MedaSystems SOC 2 Type 1 2022Request
- GxP and FDA 21 CFR Audit CertificationRequest
- MedaSystems SOC 2 Type 2 2024 AuditRequest
- MedaSystems SOC 2 Type 2 2023Request
- GDPR CertificateRequest
- Penetration Test Report 2024Request
- Data Transfer Impact AssessmentRequest
- MedaSystems Guide to Quality Management System (QMS), Validation, and SupportRequest
- Incident Response PlanRequest
- Business Continuity and Disaster Recovery PlanRequest
- Penetration Test Report 2025Request
- MedaSystems SOC 2 Type 2 2025 AuditRequest
- Business Continuity and Disaster Recovery Exercise AttestationRequest
Subprocessors
4- AAmazon Web Services · Cloud providerU.S.
- DDatadog, Inc. · datadogU.S.
- TTwilio IncU.S.
- AAtlassian · CollaborationAustralia
Compliance leadership
The person who leads MedaSystems's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. MedaSystems's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
7/11 details · 64%SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is MedaSystems SOC 2 compliant?
MedaSystems is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is MedaSystems HIPAA compliant?
According to MedaSystems's public trust center, MedaSystems is HIPAA compliant. On SOC2C this listing is Listed.
Is MedaSystems GDPR compliant?
According to MedaSystems's public trust center, MedaSystems is GDPR compliant. On SOC2C this listing is Listed.
Is MedaSystems SOC 2 Type I or Type II?
MedaSystems is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use MedaSystems's SOC 2 for a vendor risk assessment?
Yes. MedaSystems's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is MedaSystems penetration tested?
MedaSystems hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Can I get MedaSystems's SOC 2 report?
MedaSystems's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.
Is MedaSystems secure?
Security isn't a single yes/no, but MedaSystems is SOC 2 Type II compliant and holds SOC 2 Type II, HIPAA, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does MedaSystems have a bug bounty or vulnerability disclosure program?
MedaSystems hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@medasystems.com or via a /security page.
Who are MedaSystems's subprocessors?
MedaSystems lists 4 subprocessors on its trust center, including Amazon Web Services, Datadog, Inc. , Twilio Inc, Atlassian. Buyers use this for fourth-party risk review.
Where does MedaSystems host or store data?
MedaSystems hosts on AWS. Data residency details are on its trust center.
Where is MedaSystems's trust center or security page?
MedaSystems's trust center is at https://trust.medasystems.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How can I stay updated on MedaSystems' system status and notifications?
You can stay informed about system uptime, scheduled maintenance, and incidents by signing up for updates through our Status Page: https://medasystems1.statuspage.io. Simply visit the page and click "Subscribe" to receive real-time notifications via email or SMS.
Does MedaSystems sign Business Associate Agreements (BAAs)?
Yes, MedaSystems is willing to sign a Business Associate Agreement (BAA) for customers in regulated industries, such as healthcare, to ensure compliance with HIPAA requirements. Please contact our legal or sales team for more information on initiating a BAA.
Who can I contact for more information about MedaSystems’ security practices or to report a security bug?
For additional questions or concerns about our security practices, or to report a security vulnerability, please contact our team at security@medasystems.com. We take security seriously and encourage responsible disclosure. If you’re reporting a vulnerability, please include as much detail as possible so we can address the issue promptly.
Technology peers that completed SOC 2
Action1
action1.com · United States · Technology
SOC 2 Type IIRenewal not public
ELJUN LLC
eljunllc.com · United States · Technology
SOC 2 Type IIRenewal not public
equipifi
equipifi.com · United States · Technology
SOC 2 Type IIRenewal not public
IntelligentSystems Corp
hyperbound.ai · United States · Technology
SOC 2 Type IRenewal not public