HIPAA & HITECH
Compliance with the United States Health Insurance Portability and Accountability Act in our US datacentres
What are HIPAA & HITECH?
HIPAA (Health Insurance Portability and Accountability Act) and HITECH (Health Information Technology for Economic and Clinical Health Act) are US federal laws governing the protection of personal medical information (PHI). The datacenter's US datacentres fully comply with this legislation.
What does this mean for you?
- Secure processing of protected health information (PHI) in the US
- Business Associate Agreements (BAA) available
- Encryption, access control and audit logs in accordance with HIPAA requirements
- Required for healthcare organisations operating in the US
Do you need the HIPAA documentation for your own compliance or due diligence? Please reach out via our contact form.
Request documentationOther certifications
ISO 27001 / 27017 / 27018
ISO/IEC 27001:2013 Certification and ISMS relating to information security management systems for cloud services
ISO 27701
ISO/IEC 27701:2019 Certification and PIMS relating to personal data processing security management
GDPR
Compliance with Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR)
SOC 1, 2 & 3
AICPA certification SSAE 16/ISAE 3402 Type 2 for control over financial reporting
CSA STAR
Cloud Security Alliance (CSA) Level 1: Best Practices Self Assessment
CISPE
Founding member of Cloud Infrastructure Services Providers in Europe (CISPE) and signatory of its code of conduct