Drata launches automated HIPAA compliance

Drata, a security and compliance automation company, has released its automated HIPAA compliance, enabling companies to comply with the federal law addressing protected health information (PHI).

HIPAA is the third addition to Drata's framework offering, joining SOC 2 compliance and ISO 27001 certification, in less than a year since Drata's public launch.

The addition of HIPAA reflects Drata's continued commitment in helping customers safeguard PHI.

"Compliance is a critical piece to building trust with customers, and that's especially true when handling protected health information," said Adam Markowitz (pictured), Drata co-founder and CEO. "The addition of HIPAA to Drata's platform is centred around that trust and helping companies navigate this complex regulation and keep sensitive health data safe."

Drata automates the path to HIPAA compliance to ease and simplify the time-intensive process while helping companies establish trust from customers, partners, and prospects around their data. The addition of HIPAA to Drata's compliance automation platform brings an embedded complementary HIPAA security training as well as several new HIPAA-focused policy templates to Drata's library. And existing customers who have achieved SOC 2 compliance or ISO 27001 certification with Drata may see up to 81 percent or 75 percent of its respective controls apply to HIPAA, further expediting the process.

This announcement comes on the heels of Drata's recent $100M Series B financing round. With the HIPAA addition, Drata said it will continue to build out additional frameworks and features that will deepen automation and make achieving and maintaining compliance accessible for companies of all sizes.

Did you get value from this story?  Sign up to our free daily newsletters and get stories like this sent straight to your inbox.