Compliance Certifications
We maintain the highest industry standards and regularly undergo rigorous third-party audits to ensure compliance.
CompliantHIPAA
US regulation that safeguards medical data privacy and security. Essential for healthcare providers, insurers, and related tech.
Resource Library
Access our security documentation, policies, and compliance reports.
Chief Information Security Officer (CISO) Policy
Policy document
Company Handbook
Policy document
Risk and Governance Executive Committee Charter
Policy document
Information Security Policy
Policy document
Vendor Management Policy
Policy document
HIPAA Internal Privacy Policy
Policy document
Security controls
Our comprehensive security program includes controls across multiple domains to protect your data.
Access Control & Authorization
Compliance with Regulations & Standards
Data Protection & Privacy
IT & Operational Security
Risk & Compliance Management
Security & Incident Management
Access Control & Authorization
Compliance with Regulations & Standards
Data Protection & Privacy
IT & Operational Security
Risk & Compliance Management
Security & Incident Management
Access Control & Authorization
Compliance with Regulations & Standards
Data Protection & Privacy
IT & Operational Security
Risk & Compliance Management
Security & Incident Management
Subprocessors directory
We carefully select and monitor all third-party services that process data on our behalf.
MongoDB
Database Services
Slack
Messaging Services
Google Cloud Platform
Cloud Infrastructure
Google Workspace
Workspace & Collaboration
PostHog
Analytics & Insights
OpenAI
AI & Machine Learning
Frequently Asked Questions
Find answers to common questions about our security and compliance practices.
Our Security Commitment
At Avena Health, security isn't just a feature—it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies.
We treat the data entrusted to us—whether from our customers, their end users, or anyone who interacts with our organization—with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection.
