Although at Terra we never store any information, many of our customers have brought up the topic of HIPAA compliance.
HIPAA compliance ensures that an individual's health information is private, secure, and legally protected.
Since the early days of launching Terra, and going through Y-Combinator, one of our goals was to do what our users want. So for the last few months, we got straight to work implementing these security and privacy standards into Terra.
We used another Y-Combinator company to help us with the process: Vanta.
The process of obtaining HIPAA involved:
- Adopting numerous security procedures
- Adopting numerous employee practices
- And legal agreements with our customers.
- Incorporating various physical, administrative, and technical safeguards (along with our pre-existing security and privacy measures) ensuring that any electronic PHI that transits through Terra is secure.
Alongside GDPR, all our team members have undertaken HIPAA security and privacy training as well as implemented various obligatory security practices.
Hence we are now happy to say, that Terra is HIPAA compliant 🎉
