Trust Center: Security, BAA & Subprocessors

Trust Center

How SuperHIPAA protects the compliance data you trust us with.

Uptime commitments, backup and recovery objectives, and how we communicate during incidents.

Encryption at rest and in transit, key management, and what we can and cannot see.

Hosting regions, network architecture, tenancy model, and change management.

SuperHIPAA signs a Business Associate Agreement (BAA) with every customer. Read the full BAA terms here before you talk to us.

What data we collect, why, how long we keep it, and your rights over it.

How to report a vulnerability, what we commit to, and our safe-harbour terms for good-faith research.

How we protect the compliance data you trust us with — because a compliance vendor with weak security is a punchline.

Every third party that processes customer data, what they do, and where they do it.

SuperHIPAA live service status, incident history and scheduled maintenance windows, part of the SuperHIPAA Trust Center.