Snapshot 12097
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Services CirrusMD provides a telemedicine platform that connects patients with healthcare providers in real-time, through web and mobile applications. Their service allows seamless interaction between patients and doctors, enabling users to consult on medical issues, receive guidance, and manage healthcare concerns without the need for in-person visits. This platform facilitates on-demand, text-based communication, ensuring accessible healthcare for employees and patients of CirrusMD's partners, such as employers, health insurers, and healthcare systems. These services also extend to healthcare professionals who use the system for tracking and managing patient care. Security Program CirrusMD protects its stakeholders and company assets through a comprehensive security program of policies, standards, and controls. Our HIPAA-compliant platform utilizes physical, technical, and administrative safeguards to ensure full adherence to federal and state privacy laws across the entire provider network. Moreover, CirrusMD maintains its security and privacy programs in alignment with industry standards, evidenced by certifications such as ISO27001 and SOC2 Type II. These certifications attest to the thoroughness in the design and implementation of the company's policies and safeguards, ensuring they meet or surpass industry norms and are adaptable to evolving threats. Compliance FedRAMP Moderate HIPAA SOC 2 TX-RAMP Documents REPORTSNetwork Diagram REPORTSOther Reports REPORTSPentest Report COMPLIANCESOC 2 COMPLIANCETX-RAMP POLICIESAcceptable Use Policy POLICIESAccess Control Policy POLICIESAnti-Malicious Software Policy POLICIESAsset Management Policy POLICIESBackup Policy POLICIESBring Your Own Device (BYOD) Policy POLICIESBusiness Continuity/Disaster Recovery (BC/DR) Policy Risk Profile Data Access LevelRestricted Impact LevelSubstantial Recovery Time Objective24 hours View more Product Security Audit Logging Data Security Multi-Factor Authentication View more Reports Network Diagram Other Reports Pentest Report Completed Security Questionnaires We are working on our security compliance. We can provide completed questionnaires upon request. Data Security Access Monitoring Data Asset Classification Data Backups View more Product Security Bot Detection Code Analysis Credential Management View more Legal Subprocessors Cyber Insurance Master Services Agreement View more Data Privacy Cookies Data Breach Notifications Data Into System View more Access Control Access Log Management Automated Account Management Data Access View more Infrastructure Status Monitoring Amazon Web Services Anti-DDoS View more Endpoint Security Anti-Malware Disk Encryption Endpoint Detection & Response View more Network Security Data Loss Prevention Distributed Denial of Service Protection (Anti-DDoS) DNSSEC View more Corporate Security Asset Management Practices Email Protection Employee Handbook View more Policies Acceptable Use Policy Access Control Policy Anti-Malicious Software Policy View more Security Grades SecurityScorecard cirrusmd.com Qualys SSL Labs https://my.cirrusmd.com B BitSight View more Risk Management Data Access/Impact Levels Risk Assessments Supply Chain Risk Management View more Asset Management Asset Classification Asset Inventories (Hardware/Software) Asset Tracking View more Change Management Change Advisory Board (CAB) Change Control Board (CCB) Change Management Program View more Continuous Monitoring Automated Alert Response Automated Compliance Monitoring Event & Audit Log Management View more Knowledge Base (FAQ) Does your company's security awareness and training program document and ensure that all employees and contract workers have completed program requirements? Does your company restrict access to buildings or areas where data is stored, transmitted, or processed based on role and only to authorized personnel (e.g., call centers, warehouses, loading docks, shredding facilities, data centers)? Do you have a policy or procedure requiring at minimum weekly reviews of production systems' security event logs? Has an onsite risk assessment of all locations providing services to Customers been conducted by an independent external third party within the past 24 months (e.g., SOC II Type 2, EHNAC, ISO 27001, HITRUST)? Does your company manage mobile computing devices via a Mobile Device Management (MDM) tool or similar program? If yes, indicate whether the solution is internally or vendor managed in the comments section. Inclusive of company owned devices and BYOD if applicable. View more If you need help using this Trust Center, please contact us. Contact support