FanMaker vs Nirvana Health

Side-by-side SOC 2 compliance: verification level, type, auditor, and renewal timing.

	FanMaker fanmaker.com	Nirvana Health meetnirvana.com
Verification	Listed	Listed
SOC 2 type	SOC 2 Type II	SOC 2 Type II
Auditor	—	—
Last report	—	—
Renewal	Unknown	Unknown
Region	United States	United States
Size	1–50 employees	1–50 employees
Certifications	SOC 2 Type IIPCI DSS	HIPAASOC 2 Type IISOC 2 Type I
Documents	Code of ConductOn request Information Security Policy (AUP)On request Information Security Roles and ResponsibilitiesOn request Asset Management PolicyOn request Access Control PolicyOn request Data Management PolicyOn request Human Resource Security PolicyOn request Operations Security PolicyOn request Physical Security PolicyOn request Risk Management PolicyOn request Third-Party Management PolicyOn request Cryptography PolicyOn request Business Continuity and Disaster Recovery PlanOn request Incident Response PlanOn request Secure Development PolicyOn request SOC 2 Type IIOn request PCI-DSS-v4_0_1-SAQ-A-r1.pdfOn request PCI Data Flow Diagram.pdfOn request Fanmaker PCI DSS Responsibility Matrix.pdfOn request Fanmaker VPAT 2026On request Fanmaker PCI DSS AOC v4.0.1 Service ProviderOn request Fanmaker SAQ D v4.0.1 Service ProviderOn request Fanmaker HECVAT 414On request	SOC 2 Type IIOn request SOC 2 Type IOn request HIPAA Compliance PolicyOn request Human Resource Security PolicyOn request Information Security Roles and ResponsibilitiesOn request Physical Security PolicyOn request Risk Management PolicyOn request Information Security Policy (AUP)On request Asset Management PolicyOn request Incident Response PlanOn request Cryptography PolicyOn request Code of ConductOn request Data Management PolicyOn request Third-Party Management PolicyOn request Secure Development PolicyOn request Access Control PolicyOn request Operations Security PolicyOn request Business Continuity and Disaster Recovery PlanOn request HIPAA Workstation Security PolicyOn request Incident Response Plan HIPAA Addendum with Breach Notification ProceduresOn request Penetration testOn request
Hosting	—	—
Subprocessors	—	—
Key controls	Not provided	Not provided

← Compare different companies