At symplr, securing customer data is a core focus in our product development. We integrate robust security measures into all our SaaS solutions. Our policies, practices, and technologies are designed to safeguard your data across symplr products and services. We are committed to implementing best practices to mitigate potential threats, allowing you to focus on optimizing healthcare operations for your organization.

symplr’s security and privacy strategy encompasses our software products, the guidelines and technology tools we deploy, and our internal processes. Our security measures are verified and accredited by the top industry certifications, as measured by leading independent third parties. We adhere to industry standards that are designed to protect data and security compliance.
Customer data is processed and handled properly following a well-known set of security and privacy standards. Currently, 30+ symplr products are SOC 2 Type 2 compliant. symplr Talent Suite has additionally achieved SOC 1 Type II compliance.
symplr Payer, symplr Contract, symplr Clinical Communications, symplr Compliance , and symplr Safety have all achieved certified status from HITRUST by demonstrating compliance with a comprehensive set of regulatory and industry standards for information risk management and data protection. Additionally, symplr’s enterprise and organizational processes have earned HITRUST certified status.
Continuously testing our applications and defensive mechanisms with real-world scenarios to identify potential vulnerabilities, strengthen our network, and enhance incident response plans. Alignment with NIST 800-53 framework across all SaaS solutions.
symplr products comply with HIPAA Security and Privacy regulations. Internal controls and training promote adherence to data and privacy compliance when data is manually shared or processed.
Executive support, continuous training, access controls, and a proactive posture on cybersecurity encourage our employees to be a strong defense against potential threats.
Cyberattacks on healthcare organizations pose significant threats, compromising systems, patient safety, and disrupting operations. Consequently, there’s increased demand for robust data protection from technology providers.
At symplr, transparency is paramount. We are always clear about our policies, operational practices, and technologies to help ensure the security, compliance, and privacy of your data across symplr products and services.

We understand that when you use our solutions and services, you’re entrusting us with one of your most valued assets—your data. We are committed to transparency regarding our policies, operational practices, and technologies, helping you understand our approach to data security and privacy.
symplr fosters a security-focused culture as evidenced by our Secure by Design Pledge. We strive to adopt and implement security best practices to support a more secure infrastructure for our customers.
Our commitment to cybersecurity and privacy is demonstrated by leveraging best practices in technology and processes for data collection, processing, and management.
symplr is proud to support the Cybersecurity and Infrastructure Security Agency’s (CISA) Secure by Design Pledge, underscoring our commitment to a proactive cyber and information security. This initiative’s seven core goals aim to foster a preemptive and resilient cybersecurity environment. The pledge aligns with symplr’s dedication to adopting and advancing information security best practices and the symplr secure-by-default development processes.

At symplr, we are steadfast in our dedication to customers to ensure healthcare workers have more time to focus on patient care, and security has a big role in that. While recognizing there are inherent risks, we take proactive measures to help strengthen our security protocols and continually improve. Our Secure by Design pledge, SOC 2 attestations, and HITRUST recertification for symplr solutions underscore our dedication to preventing and protecting against future threats by safeguarding sensitive data, recognizing that healthcare systems cannot afford disruptions.
Chief Information Security Officer, symplr
If you are a current customer looking to report an issue or event, or looking to access our Trust Center, follow the links below for help.
