CliniciansCheck Compliance Update

We are excited to announce that CliniciansCheck has reached a major milestone in our journey towards **SOC 2** certification. After thorough preparation and the implementation of rigorous data protection and security measures, we are now ready for our **SOC 2 assessment**. We are in the final stages of assigning an **external assessor** to review our practices and provide certification.

What We Have Done So Far:

Our team has worked diligently to ensure that CliniciansCheck is aligned with the highest standards for data security, privacy, and compliance. Here's a summary of the steps we've taken:

• Information Security Policy: We’ve formalized and implemented a robust Information Security Policy, covering all critical aspects of data protection, access control, and data integrity. This policy aligns with **ISO 27001**, **HIPAA**, and **GDPR** standards to ensure secure handling of all sensitive data.
• Risk Assessment & Mitigation: We’ve established a comprehensive **risk management framework**, regularly assessing potential risks to patient and clinical data. Our **Risk Register** is continuously updated to mitigate risks and ensure the ongoing security and availability of our platform.
• Statement of Applicability (SoA): We’ve created a **Statement of Applicability**, which details the security and privacy controls in place at CliniciansCheck. This document is aligned with **ISO 27001** and SOC 2 trust service criteria, confirming that we have met all applicable standards for the protection of user data.
• Access Control: Our platform employs **role-based access controls** (RBAC), ensuring that only authorized personnel can access sensitive data. **Multi-factor authentication (MFA)** is required for all critical system access to prevent unauthorized access.
• Incident Response Plan: A clear and actionable **Incident Response Plan** has been developed to address data breaches and security incidents. This plan ensures that we can respond quickly, minimize the impact of security incidents, and comply with data breach notification requirements such as those in **GDPR** and **HIPAA**.
• Business Continuity & Disaster Recovery: We’ve implemented a comprehensive **disaster recovery plan** and **business continuity protocols** to ensure the availability of critical systems and data in the event of an emergency. Regular backups and a 6-hour **Recovery Time Objective (RTO)** are in place to safeguard against downtime.

Our Next Steps

With these comprehensive measures in place, we are confident in our readiness for the **SOC 2 audit**. Our next steps include:

• Engaging an External Assessor: We are currently in the process of selecting a qualified external assessor to conduct our SOC 2 audit. This step will help us confirm that our practices align with SOC 2 criteria for **security**, **availability**, **processing integrity**, **confidentiality**, and **privacy**.
• Audit Preparation: Our team is finalizing all necessary documentation, including detailed reports on our security controls, risk assessments, and incident management procedures. This will ensure that the assessor has all the necessary information to complete the audit efficiently.

Why SOC 2 Matters

**SOC 2** certification demonstrates our commitment to maintaining the highest standards of **security** and **privacy** for our clients and partners. It provides a comprehensive third-party review of our data security and privacy practices, assuring our users that their sensitive data is handled with the utmost care and security.

As we move forward, we will continue to prioritize transparency, security, and compliance to protect our users’ data and uphold the trust placed in us. We’ll keep our community updated as we progress through the assessment process and achieve our SOC 2 certification.

For any inquiries regarding our compliance or to request documentation, please contact our **Compliance Team** at operationsteam@clinicianscheck.com.