Security and Privacy

CortiCare takes data security and patient privacy seriously. In addition to all efforts to support HIPAA compliance, CortiCare has taken steps to ensure that its information systems and underlying data are secure. CortiCare is certified SOC 2 Type 2 compliant on the Security Trust Services Criteria through an independent auditor.

SOC 2 reports are broadly recognized and demonstrate an organization’s commitment to information security. Attainment of this certification requires meticulous planning, extensive evidence gathering, and ongoing communications. SOC 2 certification is a companywide opportunity to highlight risk management maturity and is an efficient way to satisfy customers’ information security requests. Attainment of SOC 2 Type 2 certification is a significant organizational achievement.

The SOC report is available upon request from our Manager of Information Technology for institutions actively evaluating CortiCare’s services.

Data Privacy and GDPR,CCPA Requirements

CortiCare’s collection and use of personal data is aligned with the requirements of the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Further information can be found in our Privacy Policy.


To view our Privacy Policy, click here