Compliance · Buyer-Facing
CloudHealth Trust One-Pager
Single-page summary of our security, privacy, and compliance posture. Share with buyer security teams.
Certifications & Frameworks
| Framework | Status |
|---|
| SOC 2 Type II | Active (annual) |
| HIPAA | Compliant; BAA available |
| HITRUST | Roadmap — Q4 target |
| PCI-DSS | Level 1 via processor (Stripe) |
Data Protection
- AES-256 at rest, TLS 1.2+ in transit.
- MFA + SSO enforced across workforce.
- Immutable audit logs for every PHI access.
Reliability
- 99.95% uptime SLA on Full Service tier.
- RPO ≤ 15 min · RTO ≤ 4 hrs.
Incident Response
- 24/7 on-call; Sev-1 ack ≤ 15 min.
- Breach notification to Covered Entities within 72 hrs.
Contact
trust@cloudhealth.com