Sapphire Digital Achieves HITRUST CSF® Certification to Manage Risk, Improve Security Posture and Meet Compliance Requirements

HITRUST CSF Certification validates Sapphire Digital is committed to meeting key regulations and protecting sensitive information

LYNDHURST, N.J.--(BUSINESS WIRE)--Sapphire Digital, a health care technology company that empowers consumers to shop for low-cost, high-value care, today announced that its SmartShopper, CareSelect and MEG solutions have earned certified status again for information security by HITRUST®.

HITRUST CSF Certified status demonstrates that Sapphire Digital’s SmartShopper, CareSelect and MEG solutions have met key regulations and industry-defined requirements and are appropriately managing risk. This achievement places Sapphire Digital in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organizations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

“Sapphire Digital is dedicated to providing our customers with the highest degree of data privacy and security, especially during a time when security breaches are at an all-time high in the health care industry,” said Eric Gross, Executive Vice President & General Counsel, Sapphire Digital. “The HITRUST CSF Certification validates our company-wide commitment to protecting consumer health care data above all else.”

Sapphire Digital’s HITRUST assessor, the law firm of King & Spalding, analyzed and reviewed the company’s existing security and privacy measures and indicated Sapphire Digital is the firm’s only client to have ever achieved HITRUST CSF Certification without any Corrective Action Plans (CAPS), making it a rare industry accomplishment during a time when protecting health care data is of premium importance.

“Over the last year, we reviewed Sapphire Digital’s security and privacy measures and concluded that the company scored at or above the average health care industry rating in all 19 HITRUST domains,” said Adam Solander, Partner, King & Spalding. “Through assessing many companies on HITRUST, we know that achieving the HITRUST CSF Certification with these high scores and no CAPS is not an easy feat and this achievement demonstrates Sapphire Digital’s dedication to protecting and securing health care data.”

“HITRUST has been working with the industry to ensure the appropriate information protection requirements are met when sensitive information is accessed or stored in a cloud environment. By taking the steps necessary to obtain HITRUST CSF Certified status, Sapphire Digital is distinguished as an organization that people can count on to keep their information safe,” said Jeremy Huval, Chief Compliance Officer, HITRUST.

About Sapphire Digital

Sapphire Digital is a health care technology company delivering consumer-centric solutions and services that lower the cost of care for consumers, employers and health plans. Powered by cost and quality data, our shopping navigation platform helps employers and health plans empower consumers to make better, higher-value care choices, driving measurable and sustainable savings. Over 96 million people each year rely on Sapphire Digital to help them decide on their care with confidence.

For more information, please visit www.sapphire-digital.com or follow us on LinkedIn.