Compliance & Security Announcements
Timeless Medical Systems® utilizes enterprise-grade best practices to protect our customers’ data, and works with independent experts to verify its security, privacy, and compliance controls, and has achieved SOC 2 Type 2 and HIPAA reports against stringent standards.
About HIPAA
HIPAA is a federal law that requires the creation of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge. This rigorous, independent assessment of our compliance serves as validation of our dedication and adherence to the highest standards to protect your sensitive patient health information.
About SOC 2
Earning SOC 2 Type 2 “no exceptions” attestation means that our systems controls’ design has met the rigorous standards for security and privacy compliance laid out in the “System and Organization Controls” (SOC) guidance.
Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, and confidentiality of the information processed by the systems at an entity, a division, or an operating unit of an entity.
Reporting
We work with an independent auditor to maintain SOC 2 and HIPAA reports, which objectively certifies our controls to ensure the continuous security of our customers’ data.
Continuous Security Control Monitoring
Timeless Medical Systems® uses Drata’s automated platform to continuously monitor its 100+ internal security controls against the highest possible standards across the organization. With Drata, Timeless Medical Systems® has real-time visibility across the organization to ensure the end-to-end security and compliance posture of our systems. Automated alerts and evidence collection allows Timeless Medical Systems® to confidently prove its commitment to protecting your sensitive health information any day of the year, while fostering a security-first mindset and culture of compliance across the organization.
