SOC 2
Audited
Independent audit covering security, availability, and confidentiality. The report is available for review by request.
Request the report
Trust Center
Logical Health recognizes that the confidentiality, integrity, and availability of information and data created, maintained, and hosted by us are vital to the success of our business and the privacy of our partners.
We provide clear information about our security practices, tools, resources, and responsibilities so our customers can feel confident in choosing Logical Health as a trusted provider.
This security overview highlights our steps to identify and mitigate risks, implement best practices, and continuously improve.
Compliances (2)
The frameworks that guide our security and compliance program.
HIPAA
Compliant
Safeguards for protected health information, with Business Associate Agreements governing our role in customer deployments.
Read our HIPAA statementControls (73)
Our security program covers the following controls across our products, data, systems, and organization.
Product security 5
- Production System User Review
- Situational Awareness For Incidents
- Vulnerability Remediation Process
View 2 more controls in Product security
- Centralized Management of Flaw Remediation Processes
- Notification of changes
Data security 14
- Identity Validation
- Termination of Employment
- Production Databases Access Restriction
View 11 more controls in Data security
- Multi-factor Authentication
- User Privileges Reviews
- User Access Reviews
- Encrypting Data At Rest
- Inventory of Infrastructure Assets
- Data Backups
- Testing for Reliability and Integrity
- Transfer of PII
- Inventory of Personal Data (PD)
- Choice & Consent
- Data Subject Access
Network security 8
- Impact analysis
- Limit Network Connections
- External System Connections
View 5 more controls in Network security
- Transmission Confidentiality
- Anomalous Behavior
- Capacity & Performance Management
- Data used in Testing
- Centralized Collection of Security Event Logs
App security 5
- Conspicuous Link To Privacy Notice
- Secure system modification
- Approval of Changes
View 2 more controls in App security
- Unauthorized Activities
- Login Sessions
Endpoint security 5
- Malicious Code Protection (Anti-Malware)
- Full Device or Container-based Encryption
- Endpoint Security Validation
View 2 more controls in Endpoint security
- Session Lock
- Endpoints Encryption
Corporate security 36
- Code of Business Conduct
- Organizational Structure
- Roles & Responsibilities
View 33 more controls in Corporate security
- Competency Screening
- Personnel Screening
- New Hire Policy Acknowledgement
- Security & Privacy Awareness
- Performance Review
- Periodic Policy Acknowledgement
- Automated Reporting
- Incident Reporting Assistance
- Risk Framing
- Risk Assessment
- Fraud
- Third-Party Criticality Assessments
- Assigned Cybersecurity & Privacy Responsibilities
- Internal Audit
- Periodic Review & Update of Cybersecurity & Privacy Program
- Management Review of Org Chart
- Management Review of Risks
- Management Review of Third-Party Risks
- Subservice organization evaluation
- Segregates Roles and Responsibilities
- Subprocessor Requirements
- Data Protection Impact Assessment (DPIA)
- Testing
- Customer Obligations
- Retention of Policies
- Chief Privacy Officer (CPO)
- Privacy Act Statements
- Asset Ownership Assignment
- Shared Responsibility
- New Hire Security & Privacy Training Records
- Periodic Security & Privacy Training Records
- Updates During Installations / Removals
- Inventory of Endpoint Assets
Resources (34)
Security policies and documents that are part of Logical Health’s compliance program.
Request access by email. Documents are shared privately following review of your request.