Third Party Index

Snapshot 76096

Document
Trust center
URL
https://trust.medallion.co/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
95539 bytes
SHA-256 (raw)
09b4be5220d458948676f16feb73b63fc992f5491c9358298f096080ae0aa97c
SHA-256 (normalized text)
81cc0400bcc323850185389a213e920138bdd224bf869eafedf7ceb50767a37c

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Medallion
Our all-in-one licensing, credentialing, and payer enrollment platform gets rid of the logistical headaches that all too often eat up valuable time and energy. Medallion streamlines your back office operations so you can focus on what matters most – your patients.
security@medallion.co
Compliance
SOC 2 Type II
Resources
View all
General
Medallion SOC 2 Type II
Data Flow Diagram
Cyber Insurance
Policies
Business Continuity and Disaster Recovery Plan
Information Security Policy (AUP)
Secure Development Policy
Operations Security Policy
View 10 more
Controls
View all
Infrastructure security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 16 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Code of Conduct acknowledged by contractors
View 6 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 2 more Product security controls
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 33 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Amazon Web Services
Product infrastructure
Google Workspace
Productivity and collaboration tools
GitHub
Code hosting and version control
Datadog
Monitoring and analytics
Updates
View all
General
SOC 2 Type 2 Report
Published December 23, 2025
We are pleased to announce that we have successfully obtained our SOC 2 Type 2 report for the period of September 1, 2024, to August 31, 2025. This reflects our ongoing commitment to maintaining the highest standards of security, availability, and confidentiality for our clients’ data.
General
Completion of our SOC 2 Type 2 Report
Published October 23, 2024
We are pleased to announce that we have successfully obtained our SOC 2 Type 2 report for the period of September 1, 2023, to August 31, 2024. This certification reflects our ongoing commitment to maintaining the highest standards of security, availability, and confidentiality for our clients’ data.
Compliance
SOC 2 Audit Underway
Published August 26, 2024
We are excited to announce that Medallion has officially commenced our SOC 2 Type II audit, covering the period from September 1, 2023, to August 31, 2024. This audit is a critical step in demonstrating our ongoing commitment to maintaining the highest standards of security, confidentiality, and privacy for our clients. Over the coming weeks, our controls and procedures will be thoroughly evaluated to ensure they meet the rigorous requirements of the SOC 2 framework. We will keep you informed as we progress through this important process and please see 'Engagement Letter' for more details! We will provide an update once we receive our draft report.