Dremio announced its HIPAA
compliance. The company also announced that it has renewed its SOC 2
Type II report, which now includes both Dremio Cloud AND Dremio
Software. Dremio meets the Information Security control requirements for
a multitude of other compliance frameworks and certifications including
ISO 270001 and GDPR. These certifications reflect Dremio's commitment
to data security.
HIPAA is made up of a set of regulatory standards governing the
security, privacy, and integrity of sensitive healthcare data called
protected health information (PHI). PHI is defined as any individually
identifiable health care-related information. When vendors who service
healthcare clients come into contact with PHI in any way, they must be
HIPAA compliant.
"Meeting and exceeding security standards is a must when building and
maintaining trust with prospects and customers. It gives them a sense of
trust that they deserve, knowing that their data is safe and secure,"
said Emre Saglam, senior director of security and compliance at Dremio
and 25-year cybersecurity veteran.
Clients and patients are becoming more aware of HIPAA compliance
requirements and how the regulations protect their personal health
information. Obtaining HIPAA certification is an important step for any
healthcare organization, or organizations with healthcare clients. By
demonstrating compliance with HIPAA regulations, Dremio has displayed
its commitment to upholding highest standards of data security and
compliance.