Phreesia Achieves HITRUST CSF Certification for Enhanced Security and Compliance

New York, NY, September 7, 2017 – Phreesia, the nation’s leading patient intake management platform, is pleased to announce that its applications have earned HITRUST CSF certification for information security by the Health Information Trust (HITRUST) Alliance. The certification covers Phreesia’s purpose-built intake modalities, the PhreesiaPad, Mobile and the Arrivals station, as well as the Phreesia Dashboard. The designation also confirms that Phreesia’s platform meets key healthcare regulations and requirements for protecting and securing sensitive private healthcare information.

“Phreesia is committed to improving the patient experience, and that includes earning patients’ trust to safeguard their health and financial information,” said Ashwin Altekar, Vice President of Information Security at Phreesia. “Achieving CSF HITRUST certification is yet another way we have been able to demonstrate this commitment, and it independently validates confidence in our information security and privacy controls.”

HITRUST CSF certification indicates that Phreesia has completed both a CSF Self-Assessment and a CSF Validated Assessment, engaging at a high level with CSF Assessors through a series of onsite interviews, documentation review and system testing that guarantees a greater level of assurance. In addition, the status indicates that Phreesia has met industry-defined requirements and is appropriately managing risk, and places Phreesia in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organizations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

Phreesia prioritizes security in every decision it makes as an organization, fostering a culture of compliance focused on safeguarding patient data.

“Phreesia is growing rapidly and it’s critical that we’re able to demonstrate our steadfast commitment to security at every stage of that growth,” said Phreesia CEO Chaim Indig. “HITRUST CSF certification helps to assure patients and providers using Phreesia that their information is secure and protected.”

“HITRUST has been working with the industry to ensure the appropriate information protection requirements are met when sensitive health information is accessed or stored in a cloud environment. By taking the steps necessary to obtain HITRUST CSF Certified status, Phreesia is distinguished as an organization that people can count on to keep their information safe,” said Ken Vander Wal, Chief Compliance Officer, HITRUST.

Annie Harris