Flexential

EU-US Data Privacy Framework

The United States ensures an adequate level of protection - comparable to that of the European Union - for personal data transferred from the EU to US companies under the new framework.

Health Insurance Portability and Accountability Act

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient's consent or knowledge.

Health Information Trust Alliance Common Security Framework

The HITRUST CSF certification - when attained in conjunction with the industry-specific EHNAC accreditation - demonstrates to business partners and prospects your commitment to the highest standards of data privacy and security.

International Standard for Standardization 27001

ISO/IEC 27001 is the world's best-known standard for information security management systems (ISMS).

NIST: Security and Privacy Controls for Information Systems and Organizations

A catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the Nation from a diverse set of threats and risks, including hostile attacks, human errors, natural disasters, structural failures, foreign intelligence entities, and privacy risks.

Payment Card Industry Data Security Standard

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard used to handle credit cards from major card brands.

System and Organization Controls 1 Type 2

Report on the fairness of the presentation of management's description of the service organization's system and the suitability of the design and operating effectiveness of the controls to achieve the related control objectives included in the description throughout a specified period.

System and Organization Controls 2 Type 2

SOC 2 Type 2 compliance evaluates an organization's cybersecurity controls over a period of time.

System and Organization Controls 3

A report that outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality, and privacy.

Statement on Standards for Attestation Engagements 16 Type 1

The SSAE 16 audit will result in a Service Organization Control (SOC) 1 report.

Statement on Standards for Attestation Engagements No. 18

SSAE 18 is a standard established by the AICPA that enhances the quality and consistency of service organization control reports.