Resources/ Certifications

Compliance Certifications

ISO/IEC 27001:2013 is a security management standard that specifies security management best practices and comprehensive security controls following the ISO/IEC 27002 best practice guidance. Our ISO27001:2013 certification demonstrates our commitment to information security at every level. Compliance with this internationally recognized standard is validated by an independent third-party auditor and confirms that our security management program is comprehensive and follows leading practices.

Exo is certified for ISO27001 to request certification, click here.

Exo’s System and Organization Controls (SOC) Reports are independent third-party examination reports that demonstrate how we achieve key compliance controls and objectives. The purpose of these reports is to help our customers and their auditors understand our controls established to support operations and compliance. Compliance with this standard is validated by an independent third-party auditor.

Exo is certified for SOC2 to request certification, click here.

The Health Information Trust Alliance (HITRUST) is an organization governed by representatives from the healthcare industry. HITRUST created and maintains the Common Security Framework (CSF), a certifiable framework to help healthcare organizations and their providers demonstrate their security and compliance in a consistent and streamlined manner.

The CSF builds on HIPAA and the HITECH Act, which are US healthcare laws that have established requirements for the use, disclosure, and safeguarding of individually identifiable health information, and that enforce noncompliance. HITRUST provides a benchmark — a standardized compliance framework, assessment, and certification process — leveraging nationally and internationally accepted standards and regulations such as GDPR, ISO, NIST, PCI, and HIPAA to create a comprehensive set of baseline security and privacy controls for Healthcare providers and covered entities to measure compliance. Compliance with this standard is validated by an independent third-party auditor.

Exo is certified for HITRUST to request certification, click here.