Announcing Vanta’s industry-first partnership to automate HITRUST e1

‍Update, 7/8/2024: Vanta’s partnership with HITRUST has expanded to include the HITRUST i1 and r2 Assessments. Learn more here.

‍

Today we’re excited to announce that Vanta has partnered with HITRUST® Services Corp., the leader in cybersecurity assurances, to be the first automated compliance solution for the HITRUST e1 Assessment and reseller of the HITRUST MyCSF platform. Vanta is the first pre-built solution that includes the controls, documents, and policies necessary to demonstrate your commitment to safeguarding data and protected health information (PHI) — all in a way that can be validated by HITRUST.

‍

In recent years, data breaches within the healthcare industry have become more prevalent, with an all-time high of 725 healthcare-related breaches in 2023, according to the U.S. Department of Health and Human Services Office for Civil Rights. This has resulted in consumers and businesses alike becoming more mindful of the vendors they choose to share their data with. 

‍

Historically, organizations have utilized HIPAA as a way to demonstrate a strong security posture. However, according to Vanta’s State of Trust Report, 66% of customers, investors, and suppliers are increasingly looking for proof of security and compliance. This means a self-attested framework such as HIPAA may not always be sufficient to reassure customers and prospects that their data is protected.

‍

The HITRUST e1 Certification complements HIPAA by enabling organizations to certifiably demonstrate their cybersecurity measures. It allows businesses to prove that they have implemented comprehensive security measures and benchmarks them against HITRUST’s meticulous third-party assessment process — eliminating the need for security teams to manually reassure their prospects.

‍

‍

Safeguarding sensitive data

Vanta’s pre-built HITRUST e1 solution is designed to help you demonstrate trust in your cybersecurity and PHI practices and comply with HITRUST’s rigorous standards. In this first-of-its-kind partnership with HITRUST, Vanta equips you with the necessary tools to become HITRUST e1 certified and demonstrate trust to your customers through third-party assessments and external validation from HITRUST. As the first pre-built HITRUST e1 solution, Vanta is the first provider that is recognized by HITRUST and eliminates the need to build it from scratch.

‍

‍

‍

Vanta’s partnership with HITRUST

HITRUST e1 provides organizations with simpler risk environments with a foundational set of controls for essential cybersecurity. It facilitates an organization’s initial steps towards enhanced data protection by laying the groundwork for more advanced HITRUST certifications, such as the i1 or r2, and proves that validated organizations have the necessary foundational cybersecurity measures in place.

‍

Vanta’s industry-first partnership with HITRUST simplifies the process of becoming HITRUST e1 certified. “By combining Vanta's innovative control monitoring technology with the comprehensive coverage of the HITRUST assurance program, we are setting a new standard for automated, continuous compliance and assurance,” says Blake Sutherland, EVP of Market Engagement at HITRUST. Coming soon, Vanta’s partnership with HITRUST will expand to support the advanced HITRUST CSF certifications, including i1 and r2.

‍

As an authorized reseller, Vanta’s pre-built HITRUST solution natively includes the necessary controls, documents, and policies for the e1 assessment process — eliminating the manual “do-it-yourself” approach that other platforms require. Vanta’s HITRUST e1 solution automates up to 80% of its requirements by including:

‍

• Guidance around requirements: Vanta’s HITRUST e1 solution comes with 44 new controls and 72 automated tests to ensure comprehensive and continuous compliance.
• Documents and policy templates: Vanta includes 80 new documents and 10 policy addendums to outline your practices around managing sensitive data.
• Automated evidence collection: Powered by over 300 integrations, Vanta automatically and continuously collects evidence from your technology stack.

‍

Vanta’s platform also applies overlapping, implemented controls from other supported frameworks, including up to 50% of SOC 2 and ISO 27001, so you can eliminate duplicative work across your compliance program.

‍

‍

To help you get HITRUST e1 certified quickly, Vanta has partnered with highly-regarded audit firms, A-LIGN and Prescient Assurance, as preferred assessors for the HITRUST e1 Validated Assessment. A central requirement for certification, the Validated Assessment assures customers that your practices around PHI are ready to meet the rigorous standards of HITRUST e1.

‍

Update 1/14/25: Vanta's partnership with HITRUST now features an integration with their audit portal, MyCSF, allowing you to automatically import evidence from their audit platform—further streamlining the HITRUST validation process. “Opening our platform for deeper integration with industry leaders like Vanta is part of HITRUST’s commitment to raise the relevance and reliability of our assurances while improving efficiency through integration with the broader security ecosystem,” says Blake. Learn more about the MyCSF integration here.

‍

Get started with HITRUST e1 today

HITRUST e1 is now generally available within the Vanta platform. To see how Vanta helps companies demonstrate their practices around data protection, request a demo today.

‍

Watch our webinar with HITRUST to learn more about our partnership and HITRUST e1.

‍

If you’re a current Vanta customer interested in HITRUST e1, reach out to your Customer Success Manager or Account Executive to learn more. 

‍