Trust Center - Medplum
Medplum
Medplum is the open source healthcare developer platform that helps you build, test, and deliver any healthcare product or service.
Compliance
HIPAA
SOC 2
ONC
HITRUST
Resources
SOC2 Report
Policies
Human Resource Security Policy
Third Party Risk Management Policy
Test Reports
BC/DR and IR Tabletop exercise report
HITRUST
ONC
Other resources
Controls
Updated 17 minutes ago
Infrastructure security
- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced
View 18 more Infrastructure security controls
Organizational security
- Asset disposal procedures utilized
- Production inventory maintained
- Portable media encrypted
View 13 more Organizational security controls
Product security
- Data encryption utilized
- Control self-assessments conducted
- Penetration testing performed
View 1 more Product security control
Internal security procedures
- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained
View 32 more Internal security procedures controls
Data and privacy
- Data retention procedures established
- Customer data deleted upon leaving
- Data classification policy established
Subprocessors
Amazon Web Services
• Cloud provider
Google Workspace
• Identity provider
Snowflake Inc.
• Cloud data warehouse and analytics infrastructure
United States
Salesforce
• Sales
Vanta connects to a company's core systems to continuously monitor these controls.