Trust & Compliance
Institutional rigor, built in.
As a publicly traded company handling protected health information, Health In Tech operates against the same controls the Fortune 500 expects of its own vendors.
HIPAA
Administrative, physical, and technical safeguards for PHI across the eDIYBS (Enhanced Do-it-Yourself Benefit Systems) platform and its administrative rails.
SOC 2 Type II
Independent examination of our security, availability, and confidentiality controls, refreshed annually.
ERISA
Plan documents, SPDs, and fiduciary support engineered into the self-funded product itself.
ACA
Reporting, non-discrimination testing, and market-reform provisions built into every quote.
99% Uptime
Documented platform availability across the last 12 months of production operations.
Encryption in transit & at rest
TLS 1.3 for transport; AES-256 for data at rest across primary and disaster-recovery regions.
Regulatory Position
Managed risk, disclosed clearly.
All self-funded arrangements involve managed risk. Health In Tech structures every proposal with stop-loss protection through transparent disclosures on aggregating specific deductibles, laser policy, and expected claims trend. Our legal and actuarial teams review market-facing collateral against ACA and ERISA requirements before publication.
Security Documentation
SOC 2 reports, penetration test summaries, and Business Associate Agreements available under NDA for prospective customers and partners.
Request access →Report a Vulnerability
We welcome coordinated disclosure. Security researchers can reach our security team at security@healthintech.com.
Contact security →