Trust & Safety
Enterprise healthcare compliance, by default.
Uverse Health operates under the standards enterprise security, privacy and regulatory teams already trust — with continuous audit and third-party attestation on file.
Who this is for
CISOs, privacy officers, compliance teams and procurement reviewers evaluating Uverse Health for regulated healthcare data.
Compliance matrix
Frameworks & attestations.
Attestations and audit reports are provided under NDA during procurement. Statuses below indicate scope; request the corresponding report or bridge letter from the Trust team.
| Framework | Status | Scope |
|---|---|---|
| HIPAA | In scope | US · PHI |
| SOC 2 Type II | In scope | Report on request |
| HITRUST r2 | In scope | Renewal 2026 |
| GDPR | In scope | EU · UK |
| ISO 27001 | In scope | Global |
| PIPEDA | In scope | Canada |
Subprocessors
Who we work with.
| Vendor | Purpose | Region |
|---|---|---|
| AWS | Primary infrastructure | US · EU · SG · AU |
| Cloudflare | Edge & DDoS | Global |
| Twilio | Secure notifications | Regional |
| Datadog | Monitoring | US · EU |
| Snowflake | Analytics data plane | Per residency |
Readiness checklist
Where the platform stands today.
A live-shaped view of enterprise readiness. Details available under NDA.
Readiness
Residency
Data stays where policy says it should.
Region
United States
Isolated storage · regional compute
Region
European Union
Isolated storage · regional compute
Region
Singapore
Isolated storage · regional compute
Region
Australia
Isolated storage · regional compute