3 ms·

You PM is right. Unlike SOC2, you dont get a certification. More details here [1] [1] https://compliancy-group.com/what-is-a-hipaa-certification/ https://compl

• dekhn 3y ago
  Maybe. But Google Cloud has adopted the compliance terminology: https://cloud.google.com/security/compliance/hipaa https://cloud.google.com/security/compliance/hipaa
• kstrauser 3y ago
  However, if you want to do business with any reasonable size of healthcare org, you're eventually gonna have to get a HITRUST report.
  • selinkocalar 3y ago
    That's true. Curious what your experience has been with HITRUST
    • kstrauser 3y ago
      Layoffs caught me before we finished the audit so I can’t say with full confidence. However, if you have a SOC 2 type 2 report, you’re probably 90% of the way there. They’re not perfect overlaps but it’s more like a circle viewed with astigmatism than the Mastercard logo.