Key Points:
- The SOC 2 Type II Audit is one of the world’s highest recognized standards for information security compliance.
- The American Institute of CPAs (AICPA) developed this standard to allow a third-party auditor to validate a company’s internal controls for information security.
- We partnered with the Johanson Group which has independently confirmed Hello Heart’s SOC 2 compliance – and our rigorous commitment to information security – in a new Auditor’s Report.
In our modern era of cyberattacks and data theft, companies – especially digital health companies that handle protected health information – have an obligation to excellence in information security.
To ensure we’re up to the highest industry standards, Hello Heart recently partnered with the Johanson Group, who reviewed our internal controls including policies, procedures, and infrastructure regarding data security, firewall configurations, change management, logical access, backup management, business continuity and disaster recovery, security incident response, and other critical areas of our business.
Thanks to a company-wide effort here at Hello Heart, and with the help of our trusted partner Johanson Group, we successfully achieved SOC 2 compliance and received an Auditor’s Report, which we are happy to share to demonstrate that our policies, procedures, and infrastructure meet or exceed the SOC 2 criteria.
In fact, by partnering with Johanson Group, we can confidently say we go above and beyond the minimum requirements for SOC 2 by integrating our critical infrastructure to monitor compliance to the SOC 2 framework 24/7/365, not just during the audit window.
We believe the relationship with our users and clients must be built on trust. The successful completion of our SOC 2 Report is one of many ways that we have planned to earn and retain that trust.
SOC 2 is just one aspect of our ever-growing security program. We are committed to continually improving our information security program and retaining an annual SOC 2 audit to ensure we keep supporting our customers’ needs.
If you have any questions or feedback on security and privacy at Hello Heart, please reach out to us at: security@helloheart.com.
