Compliance with HIPAA and SOC 2 Standards

Redactable is compliant with HIPAA and SOC 2 standards, reflecting our commitment to the highest levels of security and regulatory adherence.

Why it matters

These certifications are essential for organizations handling sensitive information, especially in the healthcare, finance, and legal sectors.

HIPAA focuses on safeguarding Protected Health Information (PHI) by requiring strict measures to prevent unauthorized access, use, or disclosure. Similarly, SOC 2 ensures secure data management through comprehensive risk assessments and stringent security policies, addressing criteria like security, availability, processing integrity, confidentiality, and privacy.

By meeting the stringent requirements for HIPAA and SOC 2 compliance, Redactable reinforces itself as a trusted solution for securely managing and redacting sensitive data.

Here’s what each certification entails:

HIPAA compliance

HIPAA (Health Insurance Portability and Accountability Act) sets standards for protecting Protected Health Information (PHI). Redactable complies with these standards by:

• Meeting Legal Requirements: Organizations that handle PHI must use HIPAA-compliant vendors. Redactable meets these legal standards.
• Encrypting Data: All PHI is encrypted during transmission and while stored, preventing unauthorized access.
• Enforcing Access Controls: We use multi-factor authentication (2FA), strong password policies, and role-based permissions to protect sensitive information.
• Implementing Automatic Logouts: Users are automatically logged out after inactivity to reduce security risks.
• Providing Security Training: All employees complete annual security training to ensure they understand data protection requirements.
• Notifying Customers of Breaches: If a data breach occurs, Redactable will promptly inform affected customers.

SOC 2 Type II compliance

SOC 2 Type II is a widely recognized standard that assesses an organization’s ability to manage customer data securely. Achieving this certification means that Redactable’s security controls meet industry standards and have been tested over time. Our compliance includes:

• Third-Party Audits: An independent auditor has reviewed and certified our security practices.
• Ongoing Compliance: We demonstrated that our security controls were effectively in place for at least six months.
• Coverage of Trust Principles:Our systems meet five key principles:
  • Security: Protection from unauthorized access.
  • Availability: Systems remain reliable and accessible.
  • Processing Integrity: Data is processed accurately and consistently.
  • Confidentiality: Only authorized users can access sensitive data.
  • Privacy: Personal data is collected and managed appropriately.
• Transparency for Customers: Prospective customers can review our SOC 2 audit report, reducing the need for separate security assessments.

ℹ️ Review our full security practices and verify our latest audits on our Security Page.

What this means for Redactable customers

By achieving both HIPAA and SOC 2 Type II compliance, Redactable offers customers stronger security and peace of mind. Our security controls meet industry standards recognized by leading healthcare and data protection frameworks. Third-party audits provide independent verification of our security practices to ensure transparency.

Customers can also streamline their vendor evaluation processes, as our certifications already meet key security requirements.

Additionally, Redactable’s commitment to ongoing security improvements, through regular audits, employee training, and continuous best practices, ensures that customer data remains protected over time.

These safeguards are built into our security framework to keep customer data protected at every level.

Here’s a closer look at the key measures we’ve put in place:

HIPAA compliant

SOC 2 Type 2 compliant

Secure encryption of data

Trust Center

Please find the link to our Trust Center here.

Vulnerability scans

Data stored in the US

With HIPAA and SOC 2 Type II compliance, Redactable delivers reliable, secure solutions that customers can depend on.

To review Redactable's Privacy Policy page, click here.

If you have additional questions or need help, please contact us at [email protected].