Lyssn receives annual SOC 2® & HIPAA attestation for the 5th year in a row
Lyssn’s commitment to the highest standards of data security and integrity of protected health information is central to our mission. We continually invest in the latest security best practices to ensure that our valued stakeholders’ (customers, research partners, patients/clients) data, including Protected Health Information [PHI], remains safe and secure. You should expect nothing less from any provider of behavioral health and human services technologies.
In accordance with our ongoing fidelity to the highest standards of information security, we are pleased to announce that in conjunction with A-LIGN, we’ve successfully completed our annual Type 1 SOC 2® + HIPAA report for the 5th year in a row.
What is SOC 2 report?
A SOC 2 report addresses risks associated with the handling and access of data, and can be used by a variety of organizations of any size (e.g. SaaS, colocation, data hosting, etc.) Rather than a cybersecurity assessment that evaluates specific technical configurations, a SOC 2 report focuses more on how an organization actually implements and manages controls to mitigate the identified risks across the enterprise.
Why is this important?
A SOC 2 report addresses risks associated with the handling and access of data and evaluates how Lyssn implements and manages controls to mitigate the identified risks. Lyssn takes this one step further to assess our HIPAA practices. To pass a SOC 2 + HIPAA examination and receive a letter of successful attestation an organization must proactively and consistently address controls in areas such as information security, HIPAA, access control, vendor management, system backup, business continuity and disaster relief, and more.
Security is critical when dealing with any personal health information, but is particularly crucial in behavioral health, human services, and child welfare disciplines given the intense trust required between the service provider and patient/customer.
At Lyssn, we prioritize the security of our customer’s data. Aligned with this effort, we will continue completing annual third-party security audits of our platform to ensure that we continue to lead on information security and provide the peace of mind and trust that our customers and partners expect and deserve.
For additional information see: https://aicpa.org/soc4so
