Trust Center
At Founda Health, trust begins with security. As a platform built to make healthcare data available - securely, compliantly, and at scale - security is not an afterthought; it’s embedded in everything we do. We operate in one of the most sensitive and regulated industries in the world. The confidentiality, integrity, and accessibility of healthcare data are critical not only for compliance but for clinical care, innovation, and collaboration across the health ecosystem. That’s why security is a core principle across the entire Founda Platform:
• From interoperability services to AI and imaging capabilities.
• Across cloud, on-premise, and hybrid deployments.
• Governed by strict certifications and active monitoring, not just policy.
Every solution we deliver is supported by a platform designed to uphold privacy, auditability, and control at every step.
Documents
Subprocessors
Subprocessors
- Does Founda have an Information Security Policy?
- Does Founda have an internal procedure for handling Information security incidents?
- Does Founda adhere to the requirements of GDPR and HIPAA?
- If there was a disaster with Founda Health Systems, how does Founda restore itself?
- Does Founda conduct periodic penetration tests?
External Security Assessment
Update: Annual Security Assessment Completed
At Founda Health, we believe that data availability is only possible when built on a foundation of continuous trust and rigorous security. To ensure our platform remains resilient against evolving threats, we have successfully completed our annual independent security assessment.
This year’s assessment was conducted by external security specialists and included:
Vulnerability Assessment and Penetration Testing (VAPT): A comprehensive evaluation of our web applications to identify and remediate potential risks.
Cloud Configuration Review: An audit of our cloud infrastructure to ensure alignment with security best practices and hardened environments.
External Network Penetration Test: A rigorous test of our network perimeter to validate our defenses against unauthorized access.
Improving our security posture
These independent evaluations are a core part of our "Secure by Design" principle. By proactively identifying gaps and implementing remediations, we ensure that the Founda Health platform continues to provide a secure environment for healthcare data exchange across all deployment models.
Access the reports
The detailed findings and summary reports from this assessment are now available for review.
Existing Trust Center users: You can request access directly through the portal.
New visitors: Access is available upon the execution of a Non-Disclosure Agreement