Epic River vs Nirvana Health

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

	Epic River epicriver.com	Nirvana Health meetnirvana.com
Verification	Listed	Listed
SOC 2 type	SOC 2 Type II	SOC 2 Type II
Auditor	—	—
Last report	—	—
Renewal	Unknown	Unknown
Region	United States	United States
Size	1–50 employees	1–50 employees
Certifications	SOC 2 Type IINIST CSF	HIPAASOC 2 Type IISOC 2 Type I
Documents	2025 SOC 2 Type 2 Report.pdfOn request W9 & Certificate of Good StandingOn request Kinective - 2024 OSP Hamilton Holdings FS_Redacted 051425.pdfOn request Kinective - COI.pdfOn request Penetration testOn request Business Continuity and Disaster Recovery PlanOn request Information Security Policy (AUP)On request Data Management PolicyOn request Cryptography PolicyOn request Incident Response PlanOn request Access Control PolicyOn request Secure Development PolicyOn request Risk Management PolicyOn request Operations Security PolicyOn request Third-Party Management PolicyOn request Physical Security PolicyOn request Code of ConductOn request Epic River AWS-security-report-certificate.pdfOn request Kinective - IR Plan.pdfOn request Kinective - 2025 Information Security Policy.pdfOn request Kinective - 2025 DRP Test Results.pdfOn request Kinective - 2025 DRP.pdfOn request	SOC 2 Type IIOn request SOC 2 Type IOn request HIPAA Compliance PolicyOn request Human Resource Security PolicyOn request Information Security Roles and ResponsibilitiesOn request Physical Security PolicyOn request Risk Management PolicyOn request Information Security Policy (AUP)On request Asset Management PolicyOn request Incident Response PlanOn request Cryptography PolicyOn request Code of ConductOn request Data Management PolicyOn request Third-Party Management PolicyOn request Secure Development PolicyOn request Access Control PolicyOn request Operations Security PolicyOn request Business Continuity and Disaster Recovery PlanOn request HIPAA Workstation Security PolicyOn request Incident Response Plan HIPAA Addendum with Breach Notification ProceduresOn request Penetration testOn request
Hosting	AWS	—
Subprocessors	2 listed	—
Key controls	Not provided	Not provided

← Compare different companies