Snapshot 13860
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Security at athenahealth The Trust Center is a self-service portal that allows clients to request and download our latest security certifications attestations and audit reports on a by request basis. If you require additional assistance in regards to a specific security or risk related question, please contact your athenahealth Customer Success Team member or a member of the Trust and Assurance team. customersecurityassurancesupport@athenahealth.com Privacy PolicyOpens in new tab Filter by Features of our security program include: HIPAA compliant HITRUST certified platform Regular system and process reviews, including a NIST-based Risk Assessment Technical controls and formally documented standards Staff empowerment through training Multiple channels for employees to report possible non-compliance or systemic errors Formulation of corrective plans to address any instances of non-compliance or excessive risk Objective internal and third-party audits to validate our overall compliance effort athenahealth takes responsibility for the information security of its servers. However, customers need to take responsibility for the security of their network and the systems that are used to connect to athenaOne. Compliance HITRUST r2 Validated Assessment HIPAA PCI DSS - SAQ A NIST CSF 2.0 Resources View all HITRUST athenahealth 2024 HITRUST v9.6 Certification Letter athenahealth 2025 HITRUST v9.6 Bridge Certification Letter PCI DSS SAQ A athenaOne PCI DSS 4.0.1 Certification Attestation - April 2026 Statement of Security Standards athenahealth Statement of Security Standards - Population Health- 2025 athenahealth Statement of Security Standards - athenaOne Mobile - 2025 athenahealth Statement of Security Standards - Data View - 2025 athenahealth Statement of Security Standards - athenaOne - 2025 PenTest athenahealth PCI Infrastructure PenTest Attestation - Aug 2026 athenaIDX Infrastructure Attestation July 2026 athenahealth Cloud Infrastructure PenTest Attestation - April 2026 athenahealth PCI Infrastructure Pentest Attestation- Jan 2026 View 1 more Other resources athenahealth DR Test Attestation - March 2026 Controls View all Infrastructure security Unique production database authentication enforced Unique account authentication enforced Access control procedures established View 2 more Infrastructure security controls Organizational security Asset disposal procedures utilized Code of Conduct acknowledged by employees and enforced Visitor procedures enforced View 3 more Organizational security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Development lifecycle established View 11 more Internal security procedures controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established View 1 more Data and privacy control Third Party Risk Assessment ID.AM-05: Assets (resources) are prioritized Comprehensive data encryption standards implemented Enforce least privilege and duty separation View 1 more Third Party Risk Assessment control FAQ View all