Compliance

At isolved, we understand that the products and services we offer, including isolved People Cloud™, may be subject to local, state and federal statutes and regulations, and compliance requirements and audits.

Therefore, we maintain a strong regulatory compliance program containing policies and procedures founded on solid compliance controls that correct, prevent, detect and mitigate compliance violations. Our controls are subject to annual System and Organizational Controls (SOC) audits, and our policies and procedures are regularly reviewed, tested and updated by our compliance department.

Our compliance program specifically considers federal and state privacy and security laws, including Health Insurance Portability and Accountability Act (HIPAA) as amended by the Health Information Technology for Economic and Clinical Health Act (HITECH), the Gramm-Leach-Bliley Act (GLBA) and California Privacy Rights Act (CPRA), as well as federal and state financial services and employment laws.

Our compliance program is carefully tailored to help us support the needs of our customers and partners. It contains numerous features and performs multiple critical regulatory, security and privacy risk management functions, including:

• Periodic risk assessments

• Knowledgeable and empowered compliance team, supported by a strong corporate culture of compliance, state-of-the-art regulatory monitoring tools, and credentialed regulatory, security and privacy experts

• Policies and procedures based on applicable law and industry best practices, regularly updated, tested and rigorously enforced

• Stringent training requirements for all employees

• Monitoring mechanisms, including the isolved Compliance Committee, accountable to the isolved Board of Directors

• Forensic testing and audits

• Oversight of the isolved Code of Conduct, our business ethics requirements

Our team works continuously to stay up to date, comply with the latest regulations, maintain best-in-class certifications, and is guided by the highest of industry standards, including the National Institute of Standards Technology (NIST) cybersecurity framework to ensure that you and your customers are protected whenever using isolved People Cloud.