Snapshot 15434
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Welcome to innovaccer's Trust Center Trust Center We maintain the highest standards of security, privacy, and compliance to protect sensitive healthcare information. Explore our comprehensive security framework and compliance certifications. Learn More Learn More Built on Five Pillars of Trust Our comprehensive approach to security and compliance ensures your healthcare data is protected at every level. Security Enterprise-grade security with 256-bit encryption and defense-in-depth architecture Privacy Privacy-by-design principles with granular access controls and data minimization Compliance HIPAA, HITRUST CSF, SOC 2, and ISO 27001 certified with continuous monitoring Reliability 99.9% uptime SLA with redundant infrastructure and disaster recovery Data Residency Global data centers with local compliance and sovereignty requirements Certifications & Compliance We maintain industry-leading certifications and undergo regular third-party audits to ensure compliance. Attested VERIFIED Certified Validated IN PROGRESS Self-Service Document Center Access our comprehensive library of security documentation, compliance reports, and privacy materials. All Security Ethics & Compliance Privacy Reliability All Documents ZIP • Request Access Request Access Innovaccer Code of Conduct PDF • 198 KB Download Download Conflicts of Interest Overview for Workforce Members and Vendors PDF • 2.1 MB Download Download HITRUST CSF - 2026 Interim Letter PDF • Request Access Request Access Innovaccer Ethics & Compliance Program Overview PDF • Download Download SOC 2 Type II Report and HIPAA Compliance Assessment PDF • Request Access Request Access ISO/IEC 27001:2022 Certificate PDF • Request Access Request Access SOC 2 Type II Bridge Letter PDF • Request Access Request Access Coming Soon Sub-Processors Jira/Atlassian RHACS (Stackrox) Agent Rhapsody Microsoft Snowflake Google AWS SendGrid Twilio Fullstory MixPanel New Relic Innovaccer Analytics Pvt.Ltd (India) Innovaccer Health Limited (UAE) Coming Soon Document Access Document Request: Thank you! Your submission has been received! Oops! Something went wrong while submitting the form. Non-Disclosure Agreement Required Document Request: Thank you! Your submission has been received! Oops! Something went wrong while submitting the form. Enterprise-grade security and compliance at its core We don’t train our models on your data Defense in Depth Architecture Multiple, independent layers of defense to safeguard your assets End-to-End Encryption AES-256 encryption for data at rest and TLS 1.3 for data in transit. Role-Based Access Control Granular permissions ensure users only access what they need. Core Principles Our AI governance is built on four foundational principles that guide all product development and deployment decisions: Evidence-Based, Real-World Applications Innovation priorities align with the quadruple aim in healthcare Clinical decisions remain the domain of licensed or credentialed healthcare providers AI serves as a tool that enhances rather than replaces licensed professional judgment AI applications will be aligned based on constituent relationship(s) Responsible Innovation AI applications have clearly defined purpose and scope Development balances advancement with appropriate ethical safeguards Compliance with applicable laws and regulations and adhering to industry standards where appropriate Transparency and Trust Clear disclosure of AI involvement to all stakeholders Explainable rationale for AI-generated output Honest communication about capabilities and limitations Continuous Oversight and Continuous Learning Regular monitoring of performance and outcomes Proactive identification and mitigation of emerging risks Commitment to ongoing improvement based on real-world use Governance Framework Governance Framework describes the steps Innovaccer takes when developing and deploying AI- enabled solutions consistent with or in the spirit of an industry standard or framework Impact and Risk Assessment Categorize each AI application by impact level (4-tier system) based on patient (or user) safety, workflow disruption, and decision consequence at demo and pre-launch phases Implement specific safeguards proportional to the identified risk level for each application (e.g., deploy as copilot vs autonomous agent; escalation paths; audit trails) Review and update assessments when significant changes are made to the AI application Assess alignment of AI applications with evidence-based practices for addressing the quadruple aim in healthcare (constituent health outcomes, patient experience, and provider experience while reducing costs) Fit for Purpose and Design Clearly document intended uses and limitations for all AI applications Validate performance metrics specific to select use cases before deployment with test scenarios Ensure compliance with applicable laws, regulations, and standards (HIPAA, anti-bias, etc.) Avoid development of SaMD (Software as a Medical Device) requiring FDA oversight when possible or seek appropriate internal guidance how to best to align with Innovaccer’s FDA positioning Human Oversight Model Maintain complete audit trails for all AI applications regardless of whether it was a human or agentic decision or action Establish clear escalation protocols for edge cases and exceptions as well as routine uses deviating from expected behavior For Autonomous Agents: Limit scope to administrative, operational, and clinical tasks that can be delivered safely Apply confidence thresholds that trigger human review when uncertain For Copilots: Support, don't replace licensed or credentialed healthcare provider decision-making Present recommendations with rationale enabling informed human judgment Keep humans as final gatekeepers of all clinical and high-risk administrative decisions Transparency Disclose AI involvement appropriately for the use case and industry best practice Document data sources used in training and operation of AI applications Provide understandable explanations of how AI arrives at suggestions based on the end user Maintain accessible information about AI limitations and intended use Monitoring and Improvement Track key performance indicators (or proxies) specific to each AI application Establish incident response procedures for different severity levels Collect and analyze feedback from users to drive continuous improvement Connect with our compliance and security team. Questions about Our Security and Our Compliance Program? reach out to security@innovaccer.com or compliance@innovaccer.com respectively. Need to Report a Compliance Concern? Reporting website (powered by Ethico) report a compliance concern report a compliance concern Reporting hotlines: U.S.: 800-852-8002 | India: 000-800-050-4644 | UAE: 800-032-0413