Compliance & security
Trust belongs in the controls.
Scout publishes only verified operational controls—no borrowed badges, no implied certification. Where a control is still being documented, it is not shown.
Our approach
Verified statements, or nothing.
Every control described on this page is one Scout has verified and can stand behind in writing. Qualified prospects can request diligence materials—policies, control descriptions, and evidence—through the assessment form or a controlled channel agreed with your security team.
Request diligence materialsThis website
No claim information passes through this site.
The assessment form is for business inquiries only. Bills, records, and claim data move through controlled intake channels, never this website.
Controls
What we can state today.
HIPAA and business-associate posture
Scout is HIPAA compliant. Protected health information is handled as a HIPAA business associate, under written safeguards, and Scout signs business associate agreements with its clients.
Encryption in transit and at rest
Data is encrypted in transit and at rest.
This website
This website is served only over an encrypted connection (HTTPS), and no claim information passes through it.
Role-based access and authentication
Audit logging
Retention and deletion
Backup and recovery
Incident response
Vendor and subprocessor controls
Security review process
Certifications
Insurance
What diligence asks
The questions we expect, and answer in writing.
Send the questionnaire your security team already uses. We answer it as written.
01HIPAA and business-associate postureAnswered on request, with evidence.
02Encryption in transit and at restAnswered on request, with evidence.
03Role-based access and authenticationAnswered on request, with evidence.
04Audit loggingAnswered on request, with evidence.
05Retention and deletionAnswered on request, with evidence.
06Backup and recoveryAnswered on request, with evidence.
07Incident responseAnswered on request, with evidence.
08Vendor and subprocessor controlsAnswered on request, with evidence.
09Security review processAnswered on request, with evidence.
Diligence
Ask us the hard questions.
Request the materials your review requires. We would rather answer them before the work starts than after.
Request an assessment