Snapshot 27359
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Rune Labs Rune Labs builds software and data infrastructure for precision neurology. Our StrivePD platform gives patients and clinicians managing Parkinson's disease access to FDA-cleared symptom tracking and care coordination tools, while our data platform supports biopharma and med-tech partners in clinical trial development. Given the nature of the health data we handle, we've built our security and compliance program around HIPAA and industry frameworks like HITRUST. Trust Center reflects our ongoing commitment to protecting patient privacy, dignity, and trust. [email protected] Privacy PolicyOpens in new tab Compliance HIPAA HITRUST e1 Resources View all Compliance HIPAA Insight Report HITRUST E1 Cert. Rune Labs Accessibility Conformance Report_VPAT_Q2 2026.pdf TX-RAMP Certification Product POL-R&D-0001 - Software Development Lifecycle (eff. 2026-03-01).pdf Data Flow (2026-02-10) General Architecture (2026-02-20) Security POL-IT-0013 - Incident Management (eff. 2026-03-01).pdf POL-IT-0009 - Network Security (eff. 2026-03-01).pdf SOP-SEC-0001 - Incident Response Plan (IRP).pdf POL-IT-0014 - Application Security (eff. 2026-03-01).pdf View 8 more Privacy BAA Opens in new tab Artificial Intelligence POL-IT-0023 - AI Usage Policy (eff. 2026-07-20).pdf Penetration Testing Rune Labs Cloud Pentest - Letter of Attestation - 2026 Rune Labs Mobile App Pentest - Letter of Attestation - 2026 Rune Labs Web App Pentest - Letter of Attestation - 2026 Controls View all Infrastructure security PII transmission controls for processor PII transmission controls for controller Data encryption utilized View 22 more Infrastructure security controls Organizational security MDM system utilized Data encryption utilized Remote access encrypted enforced View 3 more Organizational security controls Product security Data transmission encrypted Remote access encrypted enforced Data encryption utilized View 8 more Product security controls Internal security procedures Password policy enforced Limit collection Disposal of PII View 1 more Internal security procedures control Data and privacy Data classification policy established Handling DSAR requests Asset disposal procedures utilized View 3 more Data and privacy controls Data collected Personal health information Credit card information Subprocessors View all Amazon Web Services • Cloud provider