> ## Documentation Index
> Fetch the complete documentation index at: https://docs.germainux.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Certifications and Policies

> At Germain Software, we are committed to the highest standards of data protection, operational integrity, and information security.

Service
`Management`

Availability
2014.1 or later

> **[HITRUST Certified](#hitrust-certified)**
>
> Healthcare customer case study

> **[SOC 2 Type II Certified](#soc-2-type-ii-certified)**
>
> How the audit was done

> **[Security Policies](#security-policies)**
>
> Centrally managed policy updates

> **[Our Compliance Partners](#our-compliance-partners)**
>
> Partners supporting compliance efforts

## Germain Software Certifications Announcement

At Germain Software, we are committed to the highest standards of data protection, operational integrity, and information security. We are pleased to announce that Germain Software has successfully achieved **HITRUST**and **SOC 2 Type II certification**.

This certification reflects our continued dedication to maintaining robust controls aligned with the **Trust Services Criteria** for security, availability, and confidentiality across our systems and services.

## HITRUST Certified

A leading U.S.-based healthcare organization has relied on GermainUX for over eight years and is expanding its adoption across mission-critical systems. With HITRUST compliance now required, GermainUX continues to raise the bar on security, privacy, and enterprise readiness—supporting even the most regulated industries with confidence. This accomplishment was again made possible through the diligent efforts of our compliance team.

![Certifications and Policies: HITRUST Certified](https://mintcdn.com/germain-ux/ZJflvRMC808oZDAs/images/main/compliance/r2-HITRUST-Badge_Stacked-Outline.png?fit=max\&auto=format\&n=ZJflvRMC808oZDAs\&q=85\&s=03820982f421236baf7592935637af09)

## SOC 2 Type II Certified

Achieving SOC 2 Type II certification involved a rigorous assessment process, including a comprehensive audit and verification of our internal controls. This accomplishment was made possible through the diligent efforts of our compliance team.

![Certifications and Policies: SOC 2 Type II Certified](https://mintcdn.com/germain-ux/ZJflvRMC808oZDAs/images/main/compliance/Soc2Type2CertificationByComSec.png?fit=max\&auto=format\&n=ZJflvRMC808oZDAs\&q=85\&s=2782ad865acb60829e7c9523c3a28554)

## Audit Transparency

We prioritize transparency and accountability in our operations. Our most recent audit confirms our full compliance with SOC 2 Type II and HITRUST requirements. We extend our thanks to AssuranceLab and Prescient Security for conducting a thorough and professional audits.

> [!NOTE]
>
> Click to view our [latest HITRUST audit certificate](https://drive.google.com/file/d/1PjL9V0kGbYcA7MsfVmq-3V15y68KPf4n/view?usp=sharing)

![Certifications and Policies: Audit Transparency](https://mintcdn.com/germain-ux/ZJflvRMC808oZDAs/images/main/compliance/Screenshot-2026-07-09-071350-20260709-141350.png?fit=max\&auto=format\&n=ZJflvRMC808oZDAs\&q=85\&s=1cdae579f15506110a5f5b2f85f4d2b2)

> [!NOTE]
>
> Click to view our latest [SOC2 R2 audit certificate](https://drive.google.com/file/d/1leekzrzVfJ9IPmMgBQUsP-1dgm6fEU-1/view?usp=sharing)

![Certifications and Policies: Audit Transparency, image 2](https://mintcdn.com/germain-ux/ZJflvRMC808oZDAs/images/main/compliance/Screenshot-2026-07-09-072015-20260709-142015.png?fit=max\&auto=format\&n=ZJflvRMC808oZDAs\&q=85\&s=68981da4d608e8bd1ee6c8ff0dc37eb2)

## Security Policies

Our information security policies are centrally managed and regularly updated through our Drata Trust Center to ensure alignment with industry best practices and regulatory requirements. \
 \
 **To request access**to our SOC 2 Type II and HITRUST **reports**, please follow the designated [link](https://app.drata.com/trust/9cc54bad-0c38-11ee-865f-029d78a187d9) or contact our reach out to our Security and Compliance team at [**security@germainux.com**](mailto:security@germainux.com).

## Our Compliance Partners

We are proud to work with industry-leading organizations that support our ongoing commitment to compliance and security:

| Partner | Role |
| - | - |
| AssuranceLab & Sensiba | Independent audit and SOC 2 attestation |
| Prescient Security | Independent audit and HITRUST attestation |
| Com-Sec | Compliance readiness and advisory services |
| Drata | Security policy management and trust center platform |

## Get Help

> **[Contact GermainUX Support](https://docs.germainux.com/main/support.md)**
>
> The Germain Team can help you set this up.

> **Can't find what you need?**
>
> Search all GermainUX docs with **Ctrl + K**, or use the feedback buttons at the bottom of this page to tell us what is missing.

The content of this document is proprietary to GERMAIN SOFTWARE.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.