Nurx is a healthcare company, which provides specialized healthcare services that connects patients with medical team, from wherever the patient may be and on the patient's terms. The company is built to deliver on the three things everyone needs from their healthcare. Choice, so patients can make positive decisions about their own body. Control, so patients can plan and look after themselves without complication. Freedom, so patients' access to medication is never blocked by cost, bureaucracy, geography, stigma, or anything else.
Nurx was to implement a stronger information security program to satisfy the cyber security and data safety demands of its existing partners. Furthermore, improving its data security stance would position the company for better marketability and more growth. After consulting Jacobian Engineering, SOC 2 was selected as the most ideal compliance framework to achieve the goal.
SOC 2 is a compliance standard for service organizations which was developed by the American Institute of CPAs (AICPA) and specifies how organizations should manage customer data. The standard is based on the following trust criteria: security, availability, processing integrity, confidentiality and privacy.
Jacobian Engineering's compliance auditors completed the readiness for SOC 2 and submitted all documents to an audit firm selected by Nurx. Through the entire process, Jacobian Engineering continued working and assisting Nurx with responding to questions and requests from the audit firm until Nurx has achieved SOC 2 compliance.
Jacobian Engineering is an information security company and an AWS Advanced Tier Services Partner. Jacobian Engineering works with customers in several industries including healthcare, biotechnology, energy, financial services, construction and has strong competencies in cloud security, software development, migrations, governance, risk, and compliance.
For healthcare companies that don't choose HITRUST certification, or for which HITRUST isn't the best fit, SOC 2 offers another route. Nurx's path, a readiness program first and then support through the audit itself, is the same one our SOC 2 compliance services follow for healthcare and SaaS companies today. Healthcare companies that also handle patient data often pair SOC 2 with HIPAA compliance, so that one set of controls and evidence can support both.
Challenge: Nurx needed to implement a stronger information security program to satisfy cyber security and data safety demands of existing partners and position for growth. Solution: Jacobian Engineering guided Nurx through SOC 2 compliance, achieving certification and improving marketability.