Security that protects the
trust behind every care
decision.
Every prescription, eligibility check and patient record carries someone’s trust. Interra Health safeguards that data across prescribers, pharmacies, PBMs and patients with defense-in-depth architecture, HIPAA-compliant operations, HITRUST and SOC 2 certifications and 100% U.S. data residency.
Defense in depth, at every step your data takes
Security at Interra Health isn’t a single wall. It’s layered controls that travel with the data, from eligibility request through prescription and patient communication.
Connect Securely
Data moves through 185+ APIs built to FHIR, HL7 and NCPDP standards, and it’s encrypted across both internal and external connections.
Control Access
Role-based access controls limit who can see and act on sensitive information, and continuous monitoring watches for anything out of the ordinary.
Store It Safely, in the U.S.
Data is encrypted at rest on certified cloud infrastructure (AWS) and a certified data platform (Snowflake). 100% of customer data is processed and stored in the United States.
Independently validated
across our portfolio
Third-party certifications confirm the controls that protect your data, so you don’t have to take our word for it.
-
Independent assessments confirm that the safeguards behind every prescription meet healthcare’s most demanding security frameworks.
- HITRUST certification for healthcare-specific risk management
- SOC 2 Type II certification of security controls
- HIPAA-compliant handling of protected health information
-
Reporting goes beyond a point-in-time check: an independent auditor tests whether security controls operate effectively over an extended review period.
- SOC 2 Type II
-
The industry’s most rigorous, risk-based assessment, built to validate that controls hold up against healthcare-specific threats.
- HITRUST r2
Technology you can trust
Healthcare’s regulatory environment keeps getting more complex. Interra Health treats your most critical data as deserving more than the industry baseline.
-
U.S.-only data residency
100% of customer data is processed and stored within the United States and never leaves the country. One clear residency commitment simplifies your own compliance obligations.
-
Proven at scale
99.99% platform uptime and 630M+ annual transactions show our safeguards hold up to the rigorous, critical needs of healthcare.
-
Transparent by design
Our Trust Center gives customers and partners independently verified proof of our security controls, so you can confirm our claims before you trust us with sensitive data.
Frequently Asked Questions
Questions? We have answers
-
Yes. Interra Health’s solutions are built to safeguard protected health information, with encryption at rest and in motion, role-based access controls, and continuous monitoring. DoseSpot is HIPAA-compliant and also holds HITRUST and SOC 2 certifications, pVerify holds SOC 2 Type II certification, and Arrive Health holds HITRUST r2 certification.
-
100% of customer data is processed and stored in the United States, encrypted at rest on certified cloud infrastructure (AWS) and a certified data platform (Snowflake).
-
Our Trust Center gives customers and partners independently verified proof of our security controls, so you can review our security and compliance program before you trust us with sensitive data.