Trust Center
How member data is handled here
GMS Connect is SOC 2 Type 2 and HIPAA attested, with a control programme continuously monitored by an independent platform.
Independently attested
- SOC 2 Type 2
- Attested
- HIPAA
- Attested
An independent audit of controls over security, availability and confidentiality, measured across a period of operation rather than at a single point in time.
Controls governing the handling of protected health information, covering workforce training, access control, and breach response.
Stated by GMS Connect
- CMS compliant service solutions
- Staff are trained to comply with industry regulations for data security and confidentiality across Medicare and Medicaid programmes.
Listed separately because these are the company’s own statements rather than the findings of an independent auditor.
Continuously monitored
Industry-standard measures, regular security audits, and proactive threat monitoring.
- Monitoring platform
- Secureframe
- Control families
- 11
- Controls tracked
- 65
- Operating location
- Fort Lauderdale, FL
Control register
65 controls, 11 families
Counts as published on the live trust center. Individual control descriptions and current status are available there.
- Organizational Management13
- Access Security11
- Change Management07
- Network Security06
- Risk Assessment05
- Communications05
- Confidentiality04
- Incident Response04
- Physical Security04
- Availability03
- Vulnerability Management03
Request the SOC 2 Type 2 report
Report requests are handled through your account contact. Tell us which framework and reporting period you need and we will route the request.
Next step
Send us your security questionnaire.
We would rather answer it up front than after you have shortlisted. Attach it to the contact form or ask for the trust center link.