Security and Compliance.
Built to safeguard sensitive healthcare information
Vivlio Health is committed to safeguarding all clinical and administrative data we receive, transmit, store, and process. Protecting sensitive patient information is a core responsibility, and we apply strict physical, technical, and administrative safeguards to ensure data is handled securely, ethically, and in compliance with applicable regulations.
Vivlio follows a multi-layered security approach that combines secure cloud infrastructure, rigorous employee training, strong access controls, and continuous monitoring. These safeguards are designed to protect patient data at every stage, from record request through retrieval, storage, and use.
Secure Cloud Infrastructure
Vivlio Health is built on Amazon Web Services (AWS), a secure and reliable cloud platform widely used across the healthcare industry, Health IT companies, and the U.S. Federal Government.
AWS provides a highly secure, fault-tolerant environment designed to protect sensitive healthcare data, applications, and identities. AWS maintains leading security and compliance certifications, including HITRUST and SOC 2, which support Vivlio’s compliance posture.
All data transmitted across the AWS network is encrypted, and Vivlio maintains control over where client data is stored, who can access it, and how it is managed.
Compliance and Third-Party Verification
Vivlio Health is fully compliant with HIPAA and applicable Federal and State privacy and security regulations. To ensure ongoing compliance, Vivlio uses independent third-party assessments to validate that appropriate policies, procedures, and safeguards are in place.
These assessments verify that Vivlio:
- Protects the secure use of clinical data
- Identifies and addresses potential security risks
- Maintains required Business Associate Agreements (BAAs)
- Trains all employees on the secure and appropriate handling of protected health information
Vivlio’s security practices align with HITRUST requirements through our cloud infrastructure and internal controls.
HITRUST Certification
Vivlio’s journey to become HITRUST certified has begun. HITRUST is widely recognized as the gold standard for healthcare data protection, bringing together leading regulatory and security frameworks, including HIPAA, NIST, ISO, and SOC, into a single, independently validated control framework.
Pursuing HITRUST certification reinforces Vivlio’s commitment to security maturity and provides additional assurance to organizations that require rigorous, healthcare-specific verification as part of their vendor evaluation and procurement process.
Reliability and Resilience
Vivlio Health is built using a serverless, fault-tolerant architecture with no single points of failure. Systems are fully redundant, and data is continuously backed up and mirrored across geographically separate AWS data centers.
Disaster recovery and business continuity plans are tested and maintained to support uninterrupted service, even in the event of a regional disruption.
Data Stewardship
Client and patient data belongs to you and your patients. Vivlio Health will never use or share confidential information without explicit authorization and applies strict controls to ensure data is accessed only as permitted.
