This review is partially redacted. Request access to see full content.

SecureFrame

Compliance Infrastructure
Compliance Certification
by Head of Product
Export PDF

Details

Review Date
07/31/2023
Purchase Date
N/A
Implementation Time
N/A
Product Still in Use
Yes
Purchase Amount
Intent to Renew
Sourced by

Product Rating

Product Overall
Use Case Fit
Ease of Use
API
Integrations
Support
Value

About the Reviewer

Purchasing Team
Implementation Team
Product Oversight

Reviewer Organization

N/A

Reviewer Tech Stack

N/A

Other Products Considered

Drata
Vanta

Summary

  • Product Usage: SecureFrame is used by the organization to manage secure information and ensure compliance with regulations such as SOC 2 and HIPAA.

  • Strengths: SecureFrame delivers on its promise of providing a less painful audit process, offers good support, and uses a mix of expertise from technical to legal to business operations.

  • Weaknesses: The audit list provided by SecureFrame can feel overwhelming and could be better prioritized.

  • Overall Judgment: SecureFrame is confirmed as the right choice, delivering value for its cost and likely to be used for any future SOC 2 Type II certification.

Review

Today we’re talking about SecureFrame and how it’s used at your company. Could you give us a brief overview of the company and your role there?

Im the Head of Product at a company that’s building a tool that makes it easier for consumers to make healthcare decisions, with a focus on what you can afford. So, we’re building a financial decision-making tool in healthcare. When you go to select your insurance plan at open enrollment, we take your previous claims data from your employer or previous insurer, and run those claims against every possible plan option you have. That allows us to give you a pretty precise number as to what it will cost you to be on plan one, two, three, or four. This helps save the employee money by picking the right plan that meets their needs and passes big savings to the employer whos paying the brunt of the premium bills. We would not consider ourselves a care navigator or a front door for health. Were really trying to figure out how patients can pay for the things that they need in an affordable manner.

Why did you need a product like SecureFrame’s? What were you evaluating when you looked into working with them?

As a primarily B2B healthcare business, you are managing a certain amount of secure information. You have to abide by regulations that are quite strict. We comply with HIPAA, which is the most common compliance requirement for companies like us. Beyond HIPAA, you have a number of other requirements, like SOC 2.

Most companies have to figure out how to get these certifications. In the old days, that meant talking to a consultant, who would come in to review everything one has, from documentation to our infrastructure to our data management practices. They would talk to our employees, look at what software is on the computer, and then essentially spit out a checklist of thousands of things one had to do as a corporation to get certified. If you fulfill 90% of those things, its likely that you will pass an audit and get a certification – that’s how SOC 2 works.

You need these certifications to be able to sell in the healthcare industry. Thats goal number one and why most companies do this. The second is that it is actually a good way of practicing and making sure that youre abiding by the laws and protecting users’ and business information appropriately. This allows us to continuously build trust with our users and buyers.

With companies like SecureFrame and Vanta – you could call them tech-enabled auditors – they use APIs and connections to different pieces of software, given that everything is on your computer in the cloud, to run the audits. They automate the vast majority of things that those on-hand consultants would have done and then automatically produce that checklist for you. And in certain circumstances, they can go in and automatically run fixes as well. Id say that last piece is minimal. The hard part is to identify where youre off and to have a good prioritized list of the most important things to finish first: things that you absolutely will not pass your audit if you dont complete.

The other thing thats really important is that these tools are continuously running. SecureFrame is constantly rechecking your system and making sure that youre still in compliance. So, oftentimes, this goes into flux when you have new hires or off-boardings. Introducing new individuals to your secure data creates the biggest risk. For example, we brought in someone new two months ago, and our SecureFrame rating dropped 20 points because there was someone who hadnt taken trainings or done eight other required things. We would not have passed an audit if we had been audited at that moment. So, a tool like SecureFrame gives you a lot of peace of mind. It gives you a lot more protection when youre going in. Ultimately, it considerably lowers the cost of going through the entire audit and certification process by at least a third, if not more.

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.

Nam aliquam sem et tortor consequat id porta nibh. Auctor eu augue ut lectus arcu bibendum. Massa sapien faucibus et molestie ac feugiat sed lectus vestibulum. Nunc eget lorem dolor sed viverra ipsum nunc. Massa eget egestas purus viverra. Lacus viverra vitae congue eu consequat ac felis donec et. Sit amet mauris commodo quis imperdiet massa tincidunt nunc. Egestas erat imperdiet sed euismod. Vitae semper quis lectus nulla at volutpat diam ut. Tortor aliquam nulla facilisi cras. Imperdiet dui accumsan sit amet nulla. Nunc scelerisque viverra mauris in aliquam sem fringilla ut. Felis bibendum ut tristique et egestas quis ipsum suspendisse. Pellentesque nec nam aliquam sem et. Egestas sed sed risus pretium. Lorem ipsum dolor sit amet consectetur adipiscing.

Id porta nibh venenatis cras sed felis.

In arcu cursus euismod quis viverra nibh cras pulvinar. Urna duis convallis convallis tellus id interdum velit. Ornare aenean euismod elementum nisi quis eleifend quam adipiscing. Non blandit massa enim nec dui nunc mattis. Arcu non odio euismod lacinia. Molestie a iaculis at erat. Suspendisse in est ante in nibh mauris. Massa vitae tortor condimentum lacinia quis vel eros donec ac. Faucibus vitae aliquet nec ullamcorper. Nunc faucibus a pellentesque sit amet porttitor eget dolor morbi. Diam quam nulla porttitor massa id neque aliquam vestibulum morbi. Habitasse platea dictumst quisque sagittis purus. Tellus mauris a diam maecenas sed enim ut sem. Elementum integer enim neque volutpat. Eleifend quam adipiscing vitae proin sagittis nisl rhoncus mattis rhoncus. Nibh nisl condimentum id venenatis a condimentum vitae. Adipiscing commodo elit at imperdiet dui accumsan sit amet. Elementum nibh tellus molestie nunc non. Massa sapien faucibus et molestie ac feugiat sed lectus.

Sagittis vitae et leo duis ut diam quam nulla. Euismod nisi porta lorem mollis aliquam ut porttitor leo a.

Non quam lacus suspendisse faucibus. Pharetra massa massa ultricies mi quis hendrerit dolor. Imperdiet dui accumsan sit amet. Elit scelerisque mauris pellentesque pulvinar pellentesque habitant morbi tristique. Vestibulum mattis ullamcorper velit sed. Massa enim nec dui nunc mattis enim ut tellus elementum. Orci nulla pellentesque dignissim enim sit amet venenatis. Ut diam quam nulla porttitor massa id neque aliquam vestibulum. Nibh ipsum consequat nisl vel. Feugiat sed lectus vestibulum mattis ullamcorper velit sed ullamcorper.

Nunc lobortis mattis aliquam faucibus purus in massa tempor nec.

Etiam erat velit scelerisque in dictum non. Et tortor consequat id porta nibh. Viverra suspendisse potenti nullam ac tortor vitae purus faucibus ornare. Eu feugiat pretium nibh ipsum consequat nisl. Nec tincidunt praesent semper feugiat nibh. Nunc mi ipsum faucibus vitae aliquet nec ullamcorper sit amet. Sit amet nisl suscipit adipiscing bibendum. Nunc aliquet bibendum enim facilisis. Pellentesque pulvinar pellentesque habitant morbi tristique senectus et. Porta lorem mollis aliquam ut porttitor leo. Fames ac turpis egestas maecenas pharetra convallis. Pretium nibh ipsum consequat nisl. Mi eget mauris pharetra et ultrices neque ornare aenean euismod. Velit ut tortor pretium viverra. Lobortis scelerisque fermentum dui faucibus in ornare quam. Scelerisque in dictum non consectetur.

Amet mauris commodo quis imperdiet massa tincidunt nunc. Fames ac turpis egestas maecenas pharetra convallis posuere morbi.

Facilisis volutpat est velit egestas dui. Tellus elementum sagittis vitae et leo duis ut diam quam. Ligula ullamcorper malesuada proin libero nunc. Orci nulla pellentesque dignissim enim sit amet. Quis varius quam quisque id diam vel quam elementum pulvinar. A cras semper auctor neque vitae tempus. Risus quis varius quam quisque id diam vel. Blandit massa enim nec dui.

Accumsan in nisl nisi scelerisque eu ultrices vitae auctor eu. Condimentum mattis pellentesque id nibh tortor.

Quis lectus nulla at volutpat diam ut venenatis tellus. Est velit egestas dui id ornare. A scelerisque purus semper eget. Quis commodo odio aenean sed adipiscing diam donec adipiscing. Ullamcorper morbi tincidunt ornare massa eget egestas purus viverra accumsan. Ultricies mi eget mauris pharetra et. Nibh ipsum consequat nisl vel pretium lectus quam id. Id eu nisl nunc mi ipsum faucibus. Cras pulvinar mattis nunc sed blandit libero. Vitae justo eget magna fermentum. Enim lobortis scelerisque fermentum dui faucibus in.

Sollicitudin ac orci phasellus egestas tellus rutrum. Pharetra vel turpis nunc eget.

In cursus turpis massa tincidunt dui ut ornare lectus. Et netus et malesuada fames ac turpis. Sagittis id consectetur purus ut faucibus pulvinar elementum. Cursus vitae congue mauris rhoncus. Pharetra convallis posuere morbi leo urna. Luctus accumsan tortor posuere ac ut consequat semper viverra nam. Nulla pellentesque dignissim enim sit. Tristique senectus et netus et malesuada fames ac turpis egestas. Volutpat diam ut venenatis tellus in. At volutpat diam ut venenatis tellus. Ut etiam sit amet nisl purus. Pellentesque massa placerat duis ultricies lacus. Ac felis donec et odio pellentesque diam volutpat commodo sed.

Sed vulputate mi sit amet mauris. Consequat interdum varius sit amet mattis vulputate enim. Pretium lectus quam id leo.

Massa tincidunt nunc pulvinar sapien. Lectus quam id leo in vitae. Fringilla est ullamcorper eget nulla facilisi etiam dignissim diam. Habitant morbi tristique senectus et. Nulla pharetra diam sit amet nisl suscipit adipiscing bibendum est. Tortor consequat id porta nibh venenatis cras sed felis. Duis tristique sollicitudin nibh sit. Dignissim diam quis enim lobortis scelerisque fermentum. Ut tortor pretium viverra suspendisse potenti nullam ac tortor vitae. Lorem dolor sed viverra ipsum. Mi quis hendrerit dolor magna eget est lorem. At tempor commodo ullamcorper a lacus vestibulum sed arcu non. Pulvinar etiam non quam lacus suspendisse faucibus interdum. Tristique senectus et netus et. Vitae aliquet nec ullamcorper sit amet risus nullam eget felis.

Scelerisque purus semper eget duis at tellus at urna condimentum.

Lorem mollis aliquam ut porttitor. Nulla posuere sollicitudin aliquam ultrices sagittis orci a scelerisque. Sit amet justo donec enim diam vulputate ut. Amet luctus venenatis lectus magna fringilla urna porttitor. In metus vulputate eu scelerisque felis imperdiet. Eros donec ac odio tempor orci dapibus ultrices in. Sit amet consectetur adipiscing elit duis tristique sollicitudin nibh. Orci dapibus ultrices in iaculis nunc sed augue lacus viverra. Dignissim sodales ut eu sem integer. Tincidunt nunc pulvinar sapien et ligula. Nec feugiat in fermentum posuere urna nec tincidunt. Donec enim diam vulputate ut pharetra sit amet aliquam. Diam sit amet nisl suscipit adipiscing bibendum est.

Facilisi morbi tempus iaculis urna id volutpat lacus laoreet.

Blandit cursus risus at ultrices mi tempus imperdiet. Eget gravida cum sociis natoque penatibus et magnis dis. Pharetra pharetra massa massa ultricies mi quis hendrerit. Facilisis volutpat est velit egestas dui. Nam aliquam sem et tortor. Neque volutpat ac tincidunt vitae semper quis. In arcu cursus euismod quis viverra nibh cras pulvinar mattis. Lacinia at quis risus sed vulputate odio. Laoreet non curabitur gravida arcu. Sed sed risus pretium quam vulputate dignissim.