Snapshot 4879

Document
Data processing addendum
URL
https://trust.freshpaint.io/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
385288 bytes
SHA-256 (raw)
71c0cff3ace97e2435bfc7b2df46b0198dcaa3cc53e433e4c3125a6dffb3f09c
SHA-256 (normalized text)
c97ccb702d8f0682e39b14def244cc6467b8dfe4cd65d65a07d9b45beeec6b0b

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Trust Center
Start your security review
View & download sensitive information
Ask for information
Overview
Freshpaint is a healthcare marketing performance and compliance platform that helps organizations use modern analytics and advertising while protecting patient privacy. We provide a first-party data layer, consent enforcement, and strong security controls, and we’re investing in SOC 2 and HITRUST r2 to validate and continually improve our security and privacy program.
Compliance
SOC 2 Type 2
HIPAA
HITRUST
Freshpaint is reviewed and trusted by
Allergy Partners
Baptist Health
University of Colorado Medicine
Heartland Dental
OrthoCarolina
St. Elizabeth
Documents
Featured Documents
REPORTSSOC 2 Report
REPORTSPentest Report
REPORTSSecurity Prospectus
LEGALData Processing Agreement
LEGALBusiness Associate Agreement
POLICIESInformation Security Policy
Reports
SOC 2 Report
Pentest Report
Security Prospectus
View more
Data Security
Encryption-at-rest
Encryption-in-transit
Privacy Whitepaper
View more
Infrastructure
Status Monitoring
Amazon Web Services
BC/DR
View more
Access Control
Access Log Management
Automated Account Management
Logging
View more
Network Security
Virtual Private Cloud
Traffic Filtering
Web Application Firewall
View more
Product Security
Software Development Lifecycle
Code Analysis
Web Application Firewall
View more
Legal
Data Processing Agreement
Business Associate Agreement
Cyber Insurance
View more
Risk Management
HostingMajor Cloud Provider
Data Access LevelRestricted
Recovery Time Objective24 hours
View more
Policies
Acceptable Use Policy
Access Control Policy
Asset Management Policy
View more
Endpoint Security
Endpoint Detection & Response
Mobile Device Management
Threat Detection
View more
Corporate Security
Incident Response
Penetration Testing
Employee Training
View more
AI
AI Overview
AI Training Data and Bias
AI Security
View more
Subprocessors
Trust Center Updates
HITRUST r2 Certification Effort
Compliance
Freshpaint is actively working toward HITRUST r2 certification as part of our ongoing security and compliance program.
Vulnerability Management and Patching
Compliance
Freshpaint maintains a vulnerability management program to help identify, assess, remediate, verify, and report technical vulnerabilities across company systems and devices. Vulnerabilities are prioritized, tracked through remediation workflows, and reviewed periodically as part of our broader security and compliance program.
Security Awareness and Training Program
Compliance
Freshpaint maintains a security awareness and training program to help reinforce workforce responsibilities, reduce human-driven security risk, and support ongoing compliance requirements. Security awareness training is incorporated into onboarding and used for recurring awareness review where assigned.
Endpoint Security and Device Management Program
Compliance
Freshpaint maintains a centralized endpoint security and device management program to help ensure company devices are enrolled, configured to security baselines, and monitored for threats as part of our broader security and compliance program.