Trust Center
What runs under the platform.
Stub · Public posture ships with the first paid customer
The Honest Comply Trust Center publishes the infrastructure, vendors, and security posture the platform runs on. Every business associate the customer's PHI touches is named. Every control we claim is sourced.
Subprocessors
TODO. Each subprocessor named with role, location, BAA on file, and rotation date.
Hosting and data residency
TODO. US-only, named regions, encryption at rest and in transit.
Access controls
TODO. Least-privilege roles, MFA required, internal logging, named onboarding/offboarding flow.
Incident response
TODO. Internal incident playbook plus the customer-facing breach notification template.
TODO · content stub, full page ships with first paid customer