Security Certifications You Can Count On

MedTrainer holds independently audited SOC 2 Type 2 and SOC 3 certifications. They confirm our controls meet the highest security standards.

These are not checkboxes. They are a commitment to protecting your data and supporting your healthcare compliance program.

Patient information, including Protected Health Information (PHI), is not stored in MedTrainer's platform. Our security risk assessments align with HIPAA regulations, so you stay covered.

soc2 badge text-by-image component
soc2 badge text-by-image component

Security Built From the Inside Out

Access Controls

Permissions built around your organization

MedTrainer employees only access the data their role requires.
Your data is only accessible to our support team when you request it.
Admins set feature and role-based permissions.
You control who sees what, down to the module level.
View Our Privacy Policy
tabbed-security-1

Vulnerability Management

Proactively tested. Continuously monitored.

Independent third parties run regular penetration tests.
We find gaps before bad actors do.
Third-party security tools continuously scan our applications and infrastructure.
Our code repositories, including all dependencies, are regularly audited for vulnerabilities.
Access the Trust Center
tabbed-security-2

Our People

Our People

All employees complete security training and stay current on emerging threats.
Background checks are conducted before or promptly after hire.
All new hires sign confidentiality agreements.
View Our Privacy Policy
tabbed-security-3

Security Built From the Inside Out

Your Data Is Protected at Every Point

Encryption

  • All data in transit is encrypted with TLS v1.2, covering traffic between your browser, our servers, and connected systems like your HRIS.
  • Cloud storage and database tables are encrypted at rest with AES-256 or similar, with no gaps in coverage.

U.S.-Based Data Centers

  • MedTrainer uses Microsoft Azure as its cloud provider for production servers, databases, and supporting services (firewall, gateways, storage, etc.).
  • All data center locations are in the U.S. only, primarily in the West. Your data never leaves the country.

The Platform You Can Count On

99.90%+ Uptime
Our application SLA, maintained consistently year over year.
Always Redundant
Multiple instances keep the platform running under heavy load.
Daily Backups
Production data is backed up daily and tested every quarter.
Annual Validation
Backed-up data is validated quarterly per your retention requirements.

Single Sign-On for Total Peace of Mind

Your team shouldn't have to juggle multiple passwords to stay compliant. MedTrainer supports single sign-on so your team can log in using the identity provider you already use.

Users can set up SSO themselves in the MedTrainer platform for Google, Okta, and Microsoft Entra ID. MedTrainer uses SAML and Auth0 as the authentication protocols connecting these identity providers to the platform.

If your organization uses ADP or UKG Dimensions, MedTrainer can also enable single sign-on through those integrations.

security image side component
Learn more about MedTrainer integrations
security image side component

AI You Can Trust

Always Secure

  • AI runs in a SOC 2 Type II and ISO 27001/27017/27018/27701 certified workspace
  • AI in MedTrainer uses secure, frontier large language models
  • All data in the MedTrainer platform is excluded from training by default

Always Under Your Control

  • Enable or disable AI platform-wide or by individual feature
  • AI can only access the document or policy selected
  • User review and confirmation required before anything saves

Always Valuable

  • Reduce repetitive data entry with auto-fill and auto-extract for forms
  • Eliminate time-consuming research with courses suggested for you
  • Stay ahead of change with policy updates suggested

See How We Protect Your Data

We are happy to walk you through anything. Reach out directly or explore our full documentation.
CTA-Security