THE GOLD STANDARD OF SECURITY

The gold standard in healthcare IT, HITRUST r2 certifies compliance with HIPAA and other regulations. Smile’s HITRUST certification ensures mature privacy and security practices, including 350+ audited controls. In April 2023, Smile received the HITRUST Award for Maintaining the Highest Information Security and Privacy Standards.

For our payer and provider customers, HITRUST is the broadest, widest and deepest set of requirements. Having completed our HITRUST r2 certification, we were audited for over 350 different controls, which your organization inherits as part of our solution and service suite.

Smile Digital Health is also a part of the Global Healthcare Compliance Scale Program with partners like HITRUST and Microsoft Azure. This enables the simplification of regulatory compliance in order to accelerate solution adoption and value, without compromising security.

This certification attests to Smile’s robust internal controls over security, availability, confidentiality, and more. Unlike one-time audits, SOC 2^®- Type II validates processes over time, rather than a snapshot of data, ensuring continuous protection of customer data.

Since this certification involves extensive validation of testing recovery plans, vulnerability scanning, access management and audits, it allows Smile to keep privacy and security at the core of all processes.

ISO 27001 sets the global benchmark for information security. This certification is awarded to companies who have successfully completed an independent audit of their information security management system. Smile’s certification reflects a proactive, continuous risk-based approach to safeguarding sensitive data and meeting interoperability demands in a secure environment.

Focused on cloud data protection and consent management, ISO 27018 ensures the safeguarding of PII (Personally Identifiable Information). Smile integrates these controls, guaranteeing transparency and regulatory compliance. The ISO/IEC 27018 certification is a code of practice that focuses on cloud data protection and consent management. An add-on to ISO 27001, ISO 27018 establishes controls, objectives, and guidelines to implement measures and protect PII (Personally Identifiable Information). Smile integrates these controls into all processes end-to-end, guaranteeing transparency and regulatory compliance.

Smile is the first company to achieve the Drummond Certification for CMS-compliant FHIR APIs, ensuring seamless data sharing and improved care coordination for payers and patients.

The certification validates Smile’s platform as fully compliant with the HL7 U.S. Drug Formulary FHIR Implementation Guide referenced in the Patient Access API requirements of the CMS Final Rule.