Trust Center
Services
CirrusMD provides a telemedicine platform that connects patients with healthcare providers in real-time, through web and mobile applications. Their service allows seamless interaction between patients and doctors, enabling users to consult on medical issues, receive guidance, and manage healthcare concerns without the need for in-person visits. This platform facilitates on-demand, text-based communication, ensuring accessible healthcare for employees and patients of CirrusMD's partners, such as employers, health insurers, and healthcare systems. These services also extend to healthcare professionals who use the system for tracking and managing patient care.
Security Program
CirrusMD protects its stakeholders and company assets through a comprehensive security program of policies, standards, and controls. Our HIPAA-compliant platform utilizes physical, technical, and administrative safeguards to ensure full adherence to federal and state privacy laws across the entire provider network. Moreover, CirrusMD maintains its security and privacy programs in alignment with industry standards, evidenced by certifications such as ISO27001 and SOC2 Type II. These certifications attest to the thoroughness in the design and implementation of the company's policies and safeguards, ensuring they meet or surpass industry norms and are adaptable to evolving threats.
Completed Security Questionnaires
We are working on our security compliance. We can provide completed questionnaires upon request.
- Are compilers, editors, or other development tools present in the production environment?
- Does your company configure user accounts so that a password cannot be reset until the user's identity is verified?
- Does your company validate platforms, builds, standard images, or related templates for operating systems to ensure security requirements are correctly integrated?
- Can security logs from your company's CSP (pertaining to Customers data) be extracted and shared with Customer upon request?
- Are backups of Customers data and activity logs performed?