SOC 2 Type II
Independent examination of controls and their operation over a defined period
Independently audited platform security
TRC delivers its client platform through Zendesk's independently audited technology, supported by the following reports and certifications:
ISO 27001
Information security management
ISO 27017
Security controls for cloud services
ISO 27018
Protection of personal information in public cloud environments
ISO 27701
Privacy information management
This technology provides the foundation for the platform your organization uses to submit requests, follow their progress and receive records through TRC.
Encryption that protects
your information
Through our Zendesk-powered platform, TRC provides encrypted connections to the platform's interfaces and APIs using TLS 1.2 or higher over public networks. Platform service data stored in the underlying AWS environment is protected with AES-256 encryption.
These safeguards help protect information during transmission and storage within the platform.
TLS 1.2+
Over public networks
AES-256
Stored service data
Controlled access and account support
TRC's platform supports user permissions and authentication tools to help manage access to sensitive information.
Our team manages client accounts and retrieval workflows, providing a direct point of contact for account access, request management and record delivery. We work with your organization to understand its access requirements and coordinate the appropriate account setup.
Monitoring and operational resilience
Security monitoring
Vulnerability management
Incident response
Backup and disaster recovery
TRC's client platform benefits from the security monitoring, vulnerability management
and
incident response processes operated by Zendesk. The underlying platform also includes
backup and disaster recovery processes that support continuity and recovery.
These protections support the technology behind our day-to-day records retrieval
services.
Careful handling of
healthcare information
Medical and billing records require particular attention to confidentiality, authorization and appropriate disclosure.
TRC coordinates provider outreach, request documentation, follow-ups and delivery through one accountable retrieval process. Business Associate Agreements are available upon request, where applicable to the services provided.
Our team can also discuss your organization's specific privacy requirements and the documentation needed for your engagement.
A direct partner for your security review
When your organization evaluates TRC, our team is your point of contact.
-
Security questionnaires
We can coordinate responses to security questionnaires and requests for information about our platform and services.
-
Platform documentation
Supporting platform documentation includes certification information and instructions for requesting the underlying SOC 2 Type II report.
-
Under NDA
Certain materials require a nondisclosure agreement.
Talk to TRC
For security questions, Business Associate Agreements or vendor review requests, contact The Records Company.
EMAIL
help@therecordsco.com
PHONE
(888) 270-5784