Data Security & Compliance
HITRUST-certified virtual care
AMC Health protects PHI across every connected device, data transfer and care interaction. Our HITRUST r2-certified program is built to meet the requirements of federal agencies, health plans and health systems.
Our security commitment
Protecting sensitive health data with secure, reliable, and privacy-first technology.
20+ years
Protecting patient data in virtual care
500+
Patients monitored securely
HITRUST r2
Highest level of HITRUST certification
99.9%
Platform uptime
Security isn't a feature. It's how we operate.
For more than two decades, AMC Health has supported some of the country’s most security-conscious programs, including the U.S. Department of Veterans Affairs. That experience shapes everything we build. Our Information Protection Program is aligned with NIST and certified against HITRUST CSF r2 criteria, the most rigorous certification in healthcare.
For more than two decades, AMC Health has supported some of the country’s most security-conscious programs, including the U.S. Department of Veterans Affairs. That experience shapes everything we build. Our Information Protection Program is aligned with NIST and certified against HITRUST CSF r2 criteria, the most rigorous certification in healthcare.
Independently certified. Continuously assessed.
Our controls are validated by third-party assessors and mapped to the frameworks your security and compliance teams already use.
HITRUST CSF r2 Certified
Our Information Protection Program meets HITRUST CSF risk-based, 2-year (r2) certification criteria, the most comprehensive assurance level HITRUST offers.
NIST-aligned
Our program is aligned with NIST Cybersecurity Framework and NIST SP 800-53 control objectives.
FDA Class II Registered
CareConsole is registered as an FDA Class II medical device (product codes MWI, 21 CFR 870.2300, and DXH, 21 CFR 870.2920).
VA / federal authorization
Meets VA security requirements for the home telehealth program, including [VA ATO / FISMA Moderate].
HIPAA & HITECH
We operate as a Business Associate and sign BAAs with covered entities. Administrative, physical and technical safeguards are reviewed annually.
SOC 2 Type II
Annual independent audit of security, availability and confidentiality controls.
FAQ
Questions executives ask
Is AMC Health HIPAA compliant?
Yes. We sign BAAs with every client.
Do you sell patient data?
No. Never.
Are you HITRUST certified?
Yes, HITRUST r2, the highest level.