ZeroEntropy Trust Center
ZeroEntropy is in compliance with security best practices, has implemented and is monitoring comprehensive controls, and maintains policies to outline its security procedures.
Compliance
Links
Resources
SOC 2 Type II Report
Access Control and Termination Policy
HIPAA Internal Privacy Policy
Incident Response Policy
Data Classification Policy
Controls
Remote access tool
ePHI policy accessibility evidence
Access restricted to modify infrastructure
Access control procedures
Access review of infrastructure
Encryption of data
Privacy and confidentiality governance charter
ePHI data sanitization
Database backups
ePHI privacy and security awareness training
Source code tool
Business continuity and disaster recovery testing
Vulnerability scanning
Web application firewall
Sample code changes
SSL/TLS certificates for infrastructure
Intrusion detection tool
Infrastructure baseline hardening policy
Monitoring tool
Infrastructure firewall
Security incident list
Alerts and remediation
Breach notification communication
Incident response and breach notification policy
Whistleblower policy
Log management tool
ePHI risk assessment report
Vendor management program
Vendor list
Vendor onboarding
Vendor termination
Media disposal training
New employee and contractor agreements
List of newly hired employees & contractors
List of active employees & contractors as on date
Employee handbook
Asset register maintaining
Multi-availability zones
Risk and Governance Executive Committee meeting minutes
Risk management program
Key management services used
Mobile device management tool configurations
Ticketing tool
Security-related roles
ePHI media disposal documentation
Subprocessors
AWSCloud Infrastructure & Platform Services
OpenAIAI & ML Services
ClickHouseData Stores & Warehouses
Modal: High-performance AI infrastructureUnknown Category