TRUST / COMPLIANCE
Compliance
Where our own program stands today, and what we help clients with.
Last reviewed:
Our own program
Our own security program is aligned to NIST CSF 2.0, NIST SP 800-53, and ISO 27001. We have not had a formal third-party audit yet.
What we support for clients
HIPAA
Protecting patient health information in medical, dental, and behavioral health practices.
CMMC / NIST 800-171
Protecting controlled unclassified information for Defense contractors.
SOC 2 readiness
Getting controls and evidence in place before an auditor arrives.
FTC Safeguards Rule
A written security program for financial businesses, including tax preparers and dealerships.
Agreements we sign
Business associate agreements for healthcare clients. Data processing agreements for clients who need them.
How we help with audits
Evidence collection
Access reviews, logs, training records, and remediation history.
Policy documentation
Written policies that match how you actually work.
Gap assessments
What's missing against the framework, in priority order.
Security questionnaires
We answer the questionnaires your customers and insurers send.
Need documents or answers for a security review?
Request informationLet's look at your business together.
A 30-minute call. No cost, no pressure, and honest answers.