Security
Member data stays with the carrier.
This page lists what is in place today and what is not. If a claim is not on this page, do not assume it.
- In place
- 5
- Not yet
- 2
In place today
Controls you can check on the demo call.
Runs in your environment
Abutment is installed inside your own cloud account or data center. Member data does not leave it to reach us.
No AI provider by default
Recommendations that need a language model stay off until you turn them on. You choose the provider, under your own business associate agreement.
Access log
Every time a person opens a member or provider record, Abutment records who, what and when. Your compliance team can export it.
Named decisions
No adverse decision is made without a person. The reviewer's name and the evidence they saw are kept with the decision.
Separate carriers
Each carrier's data is kept in its own workspace. One carrier's staff can never see another carrier's records.
Not yet
What we do not have, said up front.
- Not yet
SOC 2 report
We have not completed a SOC 2 audit. We will share our plan and timeline on request.
- Not yet
HITRUST certification
Not started. Because Abutment runs in your environment, your existing controls cover the hosting.