Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is a HIPAA-covered entity?

A HIPAA-covered entity is an individual, organization, or agency to which the HIPAA Rules apply; covered entities include health care providers, health plans, and health care clearinghouses. 


Health care providers include those providers who electronically submit HIPAA transactions like claims. Providers include but are not limited to: 

  • Doctors
  • Clinics
  • Psychologists
  • Dentists
  • Chiropractors
  • Nursing homes
  • Pharmacies 


For HIPAA purposes, health plans include:

  • Health insurance companies
  • HMOs or health maintenance organizations
  • Employer-sponsored health plans
  • Government programs that pay for health care, like Medicare, Medicaid, and military and veterans’ health programs


Health care clearinghouses are public or private entities that process or facilitate the processing of nonstandard health information into standard data elements on behalf of other organizations.


HIPAA Rules apply to covered entities as well as business associates. If a covered entity engages a business associate to help carry out health care activities and functions, the covered entity must have a written business associate contract or other arrangement with the business associate that establishes what the business associate has been engaged to do, and requires the business associate to comply with HIPAA.

Additional resources you might like:

Company news
Blog
VantaCon UK highlights: See the future of trust in an AI world

From product announcements to panel discussions, watch highlights and recordings from VantaCon UK.

Product updates
Blog
Announcing Vanta’s industry-first partnership to automate HITRUST e1

Vanta has partnered with HITRUST to be the first automated compliance solution of the HITRUST e1 Assessment, helping you demonstrate your commitment to information protection.

Compliance
Event
Demonstrating your information protection practices with HITRUST

Join Vanta and HITRUST for a Coffee and Compliance session where we’ll cover everything HITRUST e1.

Additional resources you might like:

Company news
Blog
VantaCon UK highlights: See the future of trust in an AI world

From product announcements to panel discussions, watch highlights and recordings from VantaCon UK.

Product updates
Blog
Announcing Vanta’s industry-first partnership to automate HITRUST e1

Vanta has partnered with HITRUST to be the first automated compliance solution of the HITRUST e1 Assessment, helping you demonstrate your commitment to information protection.

Compliance
Event
Demonstrating your information protection practices with HITRUST

Join Vanta and HITRUST for a Coffee and Compliance session where we’ll cover everything HITRUST e1.

Compliance
Event
Strategies for scaling your GRC program with automation and AI

Join Vanta and Kobalt.io as we discuss what to consider when scaling your GRC program.

Compliance
Event
How to streamline security reviews with Trust Center

As the number and severity of third-party breaches continue to rise, companies are scrutinizing more closely not just on how they handle data, but how their vendors do as well. For security leaders, this means more security reviews are coming across their desks every day. Join us to learn how Vanta Trust Center can help streamline security reviews.

Compliance
Event
How to automate ISO 27001 and SOC 2 compliance

Join Vanta’s 45-minute live product demo on 21 May at 11 am BST. Two of our team members will walk you through the platform and answer questions throughout the session.

Compliance
Event
How to automate SOC 2 & ISO 27001 compliance

Join Vanta’s 45-minute live product demo on May 29 at 10 am PST. Two of our team members will walk you through the platform and answer questions throughout the session.

SOC 2
Event
Ask Me (Almost) Anything: Post-Audit Planning and Excellence

Navigate post-audit success with Vanta & A-LIGN. Get expert advice on leveraging findings for growth. Register for access or recording.

Company news
Blog
Celebrating international momentum at our first-ever VantaCon UK

We’re thrilled to host our first-ever VantaCon UK in London today as we continue to accelerate international momentum and expand our global footprint.

Get compliant and
build trust, fast.

Two wind turbines on a white background.
Get compliant and build trust,
fast.
Get started