# Trust Center We maintain the highest standards of security, privacy, and compliance to protect sensitive healthcare information. Explore our comprehensive security framework and compliance certifications. [Learn More](https://webflow.innovaccer.com/trust-center#collaterals) ## Built on Five Pillars of Trust Our comprehensive approach to security and compliance ensures your healthcare data is protected at every level. ### Security Enterprise-grade security with 256-bit encryption and defense-in-depth architecture ### Privacy Privacy-by-design principles with granular access controls and data minimization .png) ### Compliance HIPAA, HITRUST CSF, SOC 2, and ISO 27001 certified with continuous monitoring ### Reliability 99.9% uptime SLA with redundant infrastructure and disaster recovery ### Data Residency Global data centers with local compliance and sovereignty requirements ## Certifications & Compliance We maintain industry-leading certifications and undergo regular third-party audits to ensure compliance. ### Attested ### VERIFIED ### Certified ### Validated %201.png) ### IN PROGRESS ## Self-Service Document Center Access our comprehensive library of security documentation, compliance reports, and privacy materials. ### All ### Security ### Ethics & Compliance ### Privacy ### Reliability All Documents - **Innovaccer Code of Conduct** - PDF • 198 KB [Download](https://webflow.innovaccer.com/trust-center#) - **Conflicts of Interest Overview for Workforce Members and Vendors** - PDF • 2.1 MB [Download](https://webflow.innovaccer.com/trust-center#) - **2025 HITRUST r2 Cert. Letter** - PDF [Request Access](https://webflow.innovaccer.com/trust-center#) - **Innovaccer Ethics & Compliance Program Overview** - PDF [Download](https://webflow.innovaccer.com/trust-center#) - **Innovaccer SOC 2 + HIPAA Report** - PDF [Request Access](https://webflow.innovaccer.com/trust-center#) - **ISO 27001:2022 Certificate** - PDF [Request Access](https://webflow.innovaccer.com/trust-center#) - **SOC 2 Bridge Letter** - PDF [Request Access](https://webflow.innovaccer.com/trust-center#) --- ## Sub-Processors - Jira/Atlassian - RHACS (Stackrox) Agent - Rhapsody - Microsoft - Snowflake - Google - AWS - SendGrid - Twilio - Fullstory - MixPanel - New Relic - Innovaccer Analytics Pvt.Ltd (India) - Innovaccer Health Limited (UAE) --- ## Enterprise-grade security and compliance at its core We don’t train our models on your data ### Defense in Depth Architecture Multiple, independent layers of defense to safeguard your assets ### End-to-End Encryption AES-256 encryption for data at rest and TLS 1.3 for data in transit. ### Role-Based Access Control Granular permissions ensure users only access what they need. ## Core Principles Our AI governance is built on four foundational principles that guide all product development and deployment decisions: ### Evidence-Based, Real-World Applications - Innovation priorities align with the quadruple aim in healthcare. - Clinical decisions remain the domain of licensed or credentialed healthcare providers. - AI serves as a tool that enhances rather than replaces licensed professional judgment. - AI applications will be aligned based on constituent relationships. ### Responsible Innovation - AI applications have clearly defined purpose and scope. - Development balances advancement with appropriate ethical safeguards. - Compliance with applicable laws and regulations and adhering to industry standards where appropriate. ### Transparency and Trust - Clear disclosure of AI involvement to all stakeholders. - Explainable rationale for AI-generated output. - Honest communication about capabilities and limitations. ### Continuous Oversight and Continuous Learning - Regular monitoring of performance and outcomes. - Proactive identification and mitigation of emerging risks. - Commitment to ongoing improvement based on real-world use. ## Governance Framework Governance Framework describes the steps Innovaccer takes when developing and deploying AI-enabled solutions consistent with or in the spirit of an industry standard or framework. ### Impact and Risk Assessment - Categorize each AI application by impact level (4-tier system) based on patient (or user) safety, workflow disruption, and decision consequence at demo and pre-launch phases. - Implement specific safeguards proportional to the identified risk level for each application (e.g., deploy as copilot vs autonomous agent; escalation paths; audit trails). - Review and update assessments when significant changes are made to the AI application. - Assess alignment of AI applications with evidence-based practices for addressing the quadruple aim in healthcare. ### Fit for Purpose and Design - Clearly document intended uses and limitations for all AI applications. - Validate performance metrics specific to select use cases before deployment with test scenarios. - Ensure compliance with applicable laws, regulations, and standards (HIPAA, anti-bias, etc.). ### Human Oversight Model - Maintain complete audit trails for all AI applications regardless of whether it was a human or agentic decision or action. - Establish clear escalation protocols for edge cases and exceptions as well as routine uses deviating from expected behavior. ### Transparency - Disclose AI involvement appropriately for the use case and industry best practice. - Document data sources used in training and operation of AI applications. - Provide understandable explanations of how AI arrives at suggestions based on the end user. ### Monitoring and Improvement - Track key performance indicators (or proxies) specific to each AI application. - Establish incident response procedures for different severity levels. - Collect and analyze feedback from users to drive continuous improvement. ### Connect with our compliance and security team. ### Questions about Our Security and Our Compliance Program? Reach out to [security@innovaccer.com](mailto:security@innovaccer.com) or [compliance@innovaccer.com](mailto:compliance@innovaccer.com) respectively.