SOC2C

Awell Health vs Nirvana Health

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

Awell Health
awellhealth.com
Nirvana Health
meetnirvana.com
VerificationListedListed
SOC 2 typeSOC 2 Type IISOC 2 Type II
Auditor
Last report
RenewalUnknownUnknown
RegionUnited StatesUnited States
Size1–50 employees
Certifications
ISO 27001GDPRHIPAASOC 2 Type II
HIPAASOC 2 Type IISOC 2 Type I
Documents
  • White paper with an overview of our programs around security, privacy and AIOn request
  • ISO 27001:2022 Official CertificatePublic
  • SOC2 Report 2025On request
  • Awell ArchitecturePublic
  • Penetration test 24-25On request
  • ISO27001:2022 Surveillance audit 2025On request
  • ISO27001:2022 - ISMS Statement of ApplicabilityOn request
  • Cyber Essentials 2025Public
  • Data Security and Protection Toolkit AssessmentPublic
  • SOC 2 Type IIOn request
  • SOC 2 Type IOn request
  • HIPAA Compliance PolicyOn request
  • Human Resource Security PolicyOn request
  • Information Security Roles and ResponsibilitiesOn request
  • Physical Security PolicyOn request
  • Risk Management PolicyOn request
  • Information Security Policy (AUP)On request
  • Asset Management PolicyOn request
  • Incident Response PlanOn request
  • Cryptography PolicyOn request
  • Code of ConductOn request
  • Data Management PolicyOn request
  • Third-Party Management PolicyOn request
  • Secure Development PolicyOn request
  • Access Control PolicyOn request
  • Operations Security PolicyOn request
  • Business Continuity and Disaster Recovery PlanOn request
  • HIPAA Workstation Security PolicyOn request
  • Incident Response Plan HIPAA Addendum with Breach Notification ProceduresOn request
  • Penetration testOn request
HostingGCP
Subprocessors5 listed
Key controlsNot providedNot provided