Security
Ensuring the security of your personal information is a top priority for us at IKS Health. Here’s how we handle security:
- Data Protection Measures: We implement various measures to safeguard your personal information from unauthorized access, disclosure, alteration, or destruction.
- Encryption: Where applicable, we use encryption protocols to secure the transmission of data between your device and our servers.
- Access Controls: Access to your personal data is restricted to authorized personnel only, and we regularly review access permissions to ensure they are appropriate.
- Regular Security Audits: We conduct regular security audits and assessments to identify and address any potential vulnerabilities in our systems.
- Employee Training: Our employees undergo training on data security practices to ensure they understand their responsibilities in protecting your information.
For any security-related concerns or questions regarding our practices, please contact us at privacy@ikshealth.com.
HITRUST r2 Recertification
IKS Health has earned recertification status by HITRUST for information security. HITRUST r2 recertification demonstrates that our platforms have met demanding regulatory compliance and industry-defined requirements and is appropriately managing risk. This achievement places IKS Health in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards, and frameworks and incorporating a risk-based approach, the HITRUST Assurance Program helps organizations address security and data protection challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.
IKS Health is HITRUST Certified
HITRUST certification demonstrates that IKS Health is committed to safeguarding our customer’s data in compliance with federal and state regulations for security and data protection. To earn this elite certification, IKS Health’s platform and data centers in the US and India were audited by an Authorized External Assessor in accordance with HITRUST® Assurance Program requirements. The certification validates that our risk management approach operates under a comprehensive and flexible framework of prescriptive and scalable security controls.
SOC2
Replacing the popular SAS/70 standard, SOC2 was developed by the AICPA to provide a way for service providers to demonstrate that they have appropriate controls in place across these five areas: Security, Privacy, Availability, Confidentiality, and Integrity.
SOC 1 Type II Certification
A SOC report is an audited assessment conducted by a Certified Public Accountant (CPA) accredited by the American Institute of Certified Public Accountants (AICPA). It serves as a comprehensive evaluation of the security controls implemented within a data system, verifying their effectiveness. For IKS Health, certification to SOC 1 Type II provides direct benefits such as offering a reliable tool for clients and their auditors, enabling clients to demonstrate compliance with regulations like the Sarbanes-Oxley Act of 2002 through IKS processes, and fostering trust and confidence in IKS Health’s operations.
ISO 27001
An international standard for security, ISO 27001 ensures that a security program is in place, with appropriate processes to make it an effective, working process and not simply empty policy. ISO 27001 ensures that not only does IKS Health have a strong security program, it takes steps throughout the year to maintain and improve it.
ISO 9001
PCI DSS Certification
