Truveta Achieves HITRUST r2 Certification for Data Security
Truveta has announced an impressive milestone: its platform, Truveta Studio and Truveta Data, have been granted certified status by HITRUST for information security. This significant achievement positions Truveta among a select group of organizations globally that have attained this certification, reflecting its commitment to data security.
What is HITRUST r2 Certification?
The HITRUST r2 Certification is a robust framework developed to help organizations comply with various regulatory standards and industry requirements. It signifies that Truveta has effectively met stringent regulatory compliance and is managing risks adeptly. By considering both federal and state regulations, the HITRUST Assurance Program provides a comprehensive framework of prescriptive controls to address security and data protection challenges in a scalable manner.
Comprehensive Health Data Management
Truveta is renowned for offering regulatory-grade electronic health record (EHR) data, which is both timely and clean, derived from over 120 million patients across more than 30 health systems. The platform is updated daily, providing researchers with the most current insights into patient care, bolstered by data from over 900 hospitals and 20,000 clinics. Truveta’s extensive datasets encompass the entirety of the patient journey, including valuable clinical notes and medical images, empowering medical researchers to expedite therapy approval processes and ultimately enhance patient care.
Commitment to Data Quality and Security
In line with FDA guidance, Truveta has made substantial investments to uphold rigorous standards of data quality, security, and privacy. Through workflows designed specifically for regulatory submissions and maintaining audit-ready processes, Truveta supports life sciences organizations in complying with the most stringent regulatory mandates. The achievement of HITRUST r2 Certification serves as further proof of Truveta's unwavering dedication to exceptional data quality and privacy measures.
What Leaders are Saying about Truveta
Oscar Papel, Chief Information Security Officer at Truveta, emphasized the vital nature of trust within the healthcare sector. He stated, "Truveta’s mission is Saving Lives with Data. Trust is at the very foundation of that mission, as no data is more personal than healthcare data. To earn and maintain that trust, we have invested deeply in the most advanced security and privacy standards to manage and protect de-identified regulatory-grade patient data in Truveta. We are proud of these achievements as evidence of our relentless commitment to security and privacy.”
Global Recognition of HITRUST Certification
Jeremy Huval, Chief Innovation Officer at HITRUST, shared insights on the importance of certification, stating, “HITRUST certification is globally recognized as validation that information security and privacy controls are effective and compliant with various regulations. It’s considered the gold standard due to its comprehensive nature and the thorough assurance process it encompasses.”
Strategic Partnerships and Security Controls
Truveta has partnered with RISCPoint to create an advanced information security program aligned with HITRUST CSF standards. This collaboration has resulted in the implementation of over 600 unique security controls, validated by a leading external assessor, Schellman and Company, LLC. Jake Nix, CEO of RISCPoint, noted, “At RISCPoint, we appreciate working with forward-thinking organizations like Truveta that prioritize the security and privacy of their customers, patients, and the broader community.”
Ongoing Certifications and Achievements
In addition to HITRUST, Truveta has successfully completed the Type 2 System and Organization Controls (SOC) 2 examination and holds certifications in ISO 27001, ISO 27701, and ISO 27018. These certifications underscore Truveta's commitment to maintaining high standards in information technology security and the protection of personally identifiable information, solidifying its position as a leader in secure health data management.
Frequently Asked Questions
What is HITRUST r2 Certification?
HITRUST r2 Certification verifies that organizations have met stringent regulatory compliance and have implemented robust information security measures.
How does Truveta's data management help researchers?
Truveta provides comprehensive EHR data that facilitates the study of various diseases and therapies, allowing for significant advancements in healthcare.
What measures does Truveta take to ensure data security?
Truveta invests in advanced security standards, maintains rigorous procedures, and effectively manages de-identified regulatory-grade data to secure patient privacy.
Who validates Truveta's security controls?
Schellman and Company, LLC, a leading external assessor, validates over 600 unique security controls implemented by Truveta in collaboration with RISCPoint.
What other certifications does Truveta hold?
Besides HITRUST, Truveta is certified in Type 2 SOC 2 and holds ISO certifications, demonstrating its commitment to high security and privacy standards.
