Health Gorilla Completes SOC 2 Type 2 Certification

The SOC 2 test, developed by the American Institute of Certified Public Accountants (AICPA), is intended for enterprises of any size, regardless of industry or scope, to protect the personal assets of their potential and existing consumers.

FREMONT, CA: Health Gorilla, a leader in clinical data APIs, has declared its successful completion of the Service Organization Control (SOC) 2 Type 2 certification with HIPAA/HITECH requirements, which makes sure compliance with the leading industry standards for managing enterprise data.

SOC 2 Type 2 certification builds on the SOC 2 Type 1 certification Health Gorilla already has. The SOC 2 Type 2 report is an attestation of controls at a service organization over a minimum six-month period that reports on the description of controls given by the service organization's management, attests that the controls are suitably designed and executed, and attests to the controls' operational effectiveness.

The SOC 2 test, developed by the American Institute of Certified Public Accountants (AICPA), is intended for enterprises of any size, regardless of industry or scope, to protect the personal assets of their potential and existing consumers. Independent auditors conduct SOC2 reports, which assess the availability, security, and integrity of an organization's unique data processing systems, eventually determining if appropriate protections and controls are in place.

The independent audit, done by top cybersecurity assessment firm A-LIGN, confirms that Health Gorilla's security procedures and controls meet the Trust Services Principles and Criteria for security, availability, and privacy across time.