Is this your company? Buyers are checking Primary Record here. Claim primaryrecord.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Primary Record
Sourced from public information. Not yet verified by the company.
Primary Record is SOC 2 Type II compliant.
About
Primary Record is an app designed for families to have one secure place to organize, collaborate, and share health information – bringing together invaluable information scattered across patient portals, three-ring binders, and post-it notes. With confidence, family members and trusted advocates are empowered to organize medical information for seamless sharing, enabling them to quickly retell the health journey before, between, and after appointments. At Primary Record, Trust is our #1 priority. Trust includes customers and partners knowing that interactions with Primary Record are private an
Compliance & infrastructure
Documents
2Subprocessors
9- AAmazon Web Services · Cloud provider
- SStripe · Finance and payments
- GGitHub · Version control
- GGoogle Drive · Document management
- GGoogle Workspace · Identity provider
- HHubSpot · Marketing
- NNotion · Collaboration
- VVanta · Security
- CCheckr · Employee management
Compliance leadership
The person who leads Primary Record's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Primary Record's penetration test vendor isn't listed yet.
Claim this profile to add it.
Recent updates
Loss of service for patient portal integrations servicesOct 2025
There was a disruption in service for customers using the Patient Portal integration services from 1up Health. This was documented, communicated, and resolved in 45 minutes from 10/1/2025 4:30 pm to 5:15 pm EST.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Primary Record SOC 2 compliant?
Is Primary Record SOC 2 Type I or Type II?
Can I use Primary Record's SOC 2 for a vendor risk assessment?
Is Primary Record penetration tested?
Can I get Primary Record's SOC 2 report?
Is Primary Record secure?
Does Primary Record have a bug bounty or vulnerability disclosure program?
Who are Primary Record's subprocessors?
Where does Primary Record host or store data?
Where is Primary Record's trust center or security page?
How do you handle the data we collect?
Is Primary Record covered by HIPPA or FTC?
Where are your servers located?
How does Primary Record leverage AI within the product?
Do you encrypt data at rest?
Business & Industrial peers that completed SOC 2
Octopus Deploy
Newsworthy.ai
1099-Prep
