We Are Compliant & Certified

Did you know that only 4% to 5% of MSPs achieve SOC2 compliance in the world?

Did you also know that the IT and MSP industry are an UNREGULATED industry? Nonetheless, TruAdvantage has been intentional about achieving multiple compliance certifications since 2016. That means we keep our client’s data secure, confidential, and protected through an audited process.

HIPAA compliant since 2016 (Annual)
SOC2 compliance in progress (Annual)
Audit & Pen Test completion (Quarterly)

Your IT team has access to your most sensitive data. They have the Key to the Kingdom. Make sure their internal processes are compliant and audited.

We have been HIPAA Compliant since 2016

Achieving HIPAA compliance is an ongoing process that requires dedication, resources, and a commitment to protecting our clients’ privacy and security. We should regularly reassess our compliance efforts and adjust as needed to ensure we meet HIPAA requirements.

What is HIPAA?

HIPAA stands for the Health Insurance Portability and Accountability Act. It is a federal law passed in the United States in 1996. HIPAA is crucial in ensuring that individuals' private information is kept private and secure

How did we become HIPAA Compliant? Impact on clients?

We do the following annually:

Since 2016, we get audited and certified annually
We conduct Risk Assessment and review internal monitoring
We develop and review policies and procedures
We implement & review security safeguards
We train our staff
We implement & review privacy practices
We maintain documentation & submit it

We are in the process of SOC2 Compliance

As a service organization, we are undergoing SOC 2 examinations to demonstrate our commitment to data security, integrity, availability, and privacy. Our clients can use our SOC 2 reports to evaluate our effectiveness, risk exposure, accountability and assurance of data security and make an informed decision about engaging with us as their IT partner.

What is SOC2?

Service Organization Control 2, is a framework for evaluating and reporting on the controls of service organizations that handle customer data. Developed by the American Institute of Certified Public Accountants (AICPA), SOC 2 reports provide assurance on the security, availability, processing integrity, confidentiality, and privacy of customer data.

How are we undergoing SOC2 Compliance? Impact on clients?

We are doing the following:

Perform a Gap Analysis
Develop a Remediation Plan
Develop Policies and Procedures on Governance, Change Management, Billing, Data Management & Physical Security
Establish Monitoring and Reporting Processes
Engage an Independent Auditor (CPA)
Conduct the SOC 2 Examination
Conduct Interviews and Testing
Maintain Ongoing Compliance & Update