Does VIBLY Inc have a bug bounty or vulnerability disclosure program?

VIBLY Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@vibly.io or via a /security page (VIBLY Inc lists a security contact).

Who are VIBLY Inc's subprocessors?

VIBLY Inc lists 7 subprocessors on its trust center, including Amazon Web Services, GitLab, Google Workspace, Notion, OpenAI. Buyers use this for fourth-party risk review.

Where is VIBLY Inc's trust center or security page?

VIBLY Inc's trust center is at https://trust.vibly.io. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Is this your company? Buyers are checking VIBLY Inc here. Claim vibly.io free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free

VIBLY Inc

Q: Where does VIBLY Inc host or store data?

VIBLY Inc hosts on AWS, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.

vibly.io · United States · Security contact

Security overview Compliance Penetration test

Trust level

Listed

Unverified

Listed

Domain

Report

Live

Sourced from public information. Not yet verified by the company.

VIBLY Inc is SOC 2 compliant. VIBLY Inc also holds HIPAA.

Request report access Claim this profile

Framework

SOC 2

Auditor

Not publicAdd

Last report

—Add

Renewal

UnknownAdd

View official trust center ↗

About

Vibly is a hyper-personalized platform powered by human expertise and AI that helps individuals achieve personal growth and well-being in all aspects of their lives. We envision a future where people everywhere can achieve their utmost potential and optimal well-being, empowering them to live their best lives. For individuals, we offer an end-to-end solution with personalized tools, knowledge, insights, and expert guidance integrated into a single platform, customizable to each person's unique goals, strengths, and needs. For providers, we offer an AI-powered platform, marketplace, and communi

Compliance & infrastructure

HIPAA

Hosting

AWS

Data handled

Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information

Documents

Vibly HIPAA Audit - Aug 2024Request

Subprocessors

A
Amazon Web Services · Cloud provider
G
GitLab · Version control
G
Google Workspace · Identity provider
N
Notion · Collaboration
O
OpenAI · Engineering
A
Asana · Task Management
D
Datadog · Cloud monitoring

Compliance leadership

The person who leads VIBLY Inc's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. VIBLY Inc's penetration test vendor isn't listed yet.

Claim this profile to add it.

This listing is partial

6/11 details · 55%

SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

Auditorraises trust
Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
Report dateraises trust
Add your most recent report period so buyers see how current your SOC 2 is.
Renewal date
Add your renewal window so buyers know your coverage is active.
Other certifications
List your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
Security controls
Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.

Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is VIBLY Inc SOC 2 compliant?

VIBLY Inc is SOC 2 compliant. On SOC2C this listing is Listed.

Is VIBLY Inc HIPAA compliant?

According to VIBLY Inc's public trust center, VIBLY Inc is HIPAA compliant. On SOC2C this listing is Listed.

Can I use VIBLY Inc's SOC 2 for a vendor risk assessment?

Yes. VIBLY Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Is VIBLY Inc penetration tested?

VIBLY Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Is VIBLY Inc secure?

Security isn't a single yes/no, but VIBLY Inc is SOC 2 compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Show 4 more questions

Answers published by VIBLY Inc

Reproduced from VIBLY Inc's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

What is HIPAA and why is it important?

HIPAA (Health Insurance Portability and Accountability Act) is a U.S. federal law enacted to ensure the protection of sensitive patient data. It sets national standards for safeguarding protected health information (PHI) and mandates strict guidelines for the privacy, security, and breach notification of PHI. HIPAA compliance is crucial as it ensures that healthcare providers and their business associates protect patient information from unauthorized access and breaches.

How does Vibly ensure HIPAA compliance?

Vibly ensures HIPAA compliance through comprehensive policies and procedures, employee and contractor training, strict access controls, and regular internal and external audits. We continuously monitor our systems and update our practices to align with the latest HIPAA regulations and industry standards.

What types of data does Vibly protect under HIPAA?

Vibly protects all forms of protected health information (PHI) any other personally identifiable information (PII) related to an individual’s healthcare. We ensure that all data, whether stored or transmitted, is secured according to HIPAA standards.

What technical safeguards does Vibly have in place?

Vibly uses advanced encryption protocols for both data at rest and data in transit. We employ role-based access controls (RBAC) to limit access to PHI. Additionally, we implement two-factor authentication (2FA) for added security and conduct regular system audits and continuous monitoring using tools like AWS CloudTrail and Vanta to detect and respond to potential security threats.

How are Vibly employees and contractors trained in HIPAA compliance?

Vibly provides comprehensive HIPAA training to all employees and contractors during their onboarding process. This training covers the essentials of HIPAA, including privacy rules, security practices, and breach notification requirements. We also provide annual refresher training to keep everyone updated on the latest HIPAA regulations and company policies. Employees and contractors have access to extensive documentation, policies, and procedures related to HIPAA compliance, which they can reference at any time.

How does Vibly control access to sensitive data?

Access to sensitive data at Vibly is controlled through role-based access controls (RBAC), two-factor authentication (2FA), and a strict approval process managed by our security officers. Only individuals with a legitimate need to access PHI are granted access, and all access requests are carefully reviewed and documented to ensure compliance with HIPAA.

How does Vibly protect data at rest and in transit?

Vibly uses strong encryption methods to protect data at rest, managed through AWS Key Management Service (KMS), ensuring that all stored data is secure and inaccessible to unauthorized parties. To protect data in transit, Vibly utilizes Transport Layer Security (TLS) and Secure Sockets Layer (SSL) certificates managed by AWS Certificate Manager. We enforce HTTPS for all communications, ensuring that data transmitted over the internet is encrypted and secure.

What steps does Vibly take in case of a data breach?

Vibly follows a comprehensive incident response plan designed to quickly contain, mitigate, and resolve issue in case of a data breach. Employees are trained to immediately report any suspected breaches to the security officer, who then activates the incident response team. The team conducts a thorough investigation, implements corrective actions, and follows HIPAA’s breach notification procedures to inform affected individuals and regulatory bodies as required by law.

Does Vibly have agreements with third-party vendors?

Yes, Vibly maintains Business Associate Agreements (BAAs) with all third-party vendors who have access to electronic protected health information (ePHI). These agreements ensure that our vendors comply with HIPAA requirements in their handling of ePHI. All BAAs are meticulously tracked, reviewed, and managed through our Trust Center to ensure ongoing compliance.

How do we ensure our business associates are HIPAA compliant?

Vibly ensures that all business associates are HIPAA compliant by conducting thorough due diligence during the vendor selection process. We vet each vendor’s security practices, require the execution of a BAA, and regularly review and update these agreements.

How often does Vibly conduct audits?

Vibly conducts regular audits, including both internal audits by our compliance team and external audits by third-party specialists, to ensure ongoing compliance with HIPAA regulations. These audits are scheduled on an annual basis, but we also conduct audits whenever there are significant changes in our systems, processes, or regulations.

Show 6 more questions

Healthcare peers that completed SOC 2

Compare vs Ambiencehealthcare Compare vs Elfie Compare vs Vitablehealth