As part of our journey in the HITRUST RightStart program, we’ve been surveying the vendor landscape to see who else has HITRUST certification.
Founded in 2007, HITRUST Alliance is a not-for-profit organization whose mission is to champion programs that safeguard sensitive information and manage information risk for organizations across all industries and throughout the third-party supply chain.
In this post, we will determine whether Microsoft is HITRUST certified or not.
SEE ALSO: Is Office 365 HIPAA Compliant?
Since Microsoft is such a large company, we’ll limit the scope of our HITRUST research to Office 365 and Azure.
Office 365 is the brand name Microsoft uses for a group of software and services subscriptions, which together provide productivity software and related services to subscribers.
For business users, Office 365 offers service plans providing e-mail, chat, cloud storage, as well as access to the Microsoft Office software.
Microsoft Azure is a cloud computing service for building, testing, deploying, and managing applications and services through a global network of Microsoft-managed data centers.
Microsoft and HITRUST
Although there isn’t a formal HIPAA certification issued by the U.S. Department of Health and Human Services (HHS), HITRUST certification is widely regarding as the closest thing to it.
A quick search revealed that Microsoft does mention HITRUST on its website.
Is Office 365 HITRUST Certified?
On 5 October 2018, a blog post revealed Office 365 earned HITRUST certification.
Is Microsoft Azure HITRUST Certified?
On 3 January 2017, Microsoft announced Azure earned HITRUST certification.
Conclusion: Yes, Microsoft’s Office 365 and Azure platform are HITRUST certified.
The RightStart program, which is a new initiative from HITRUST, aims to give startups the tools needed to make information security and compliance easier to establish and manage. The newly-introduced program helps startups like us accelerate adoption of the most comprehensive risk management, compliance, privacy and security suite of services in the marketplace.