Procurement and audit teams asking where certification stands
Certification status
ISO 27001-ready, certification planned; no certification or attestation held as of 01.10.2026. HIPAA-ready, with a BAA offered once the contracting entity is incorporated. SOC 2: attestation planned.
What is not claimed
No standard is certified today: not ISO 27001, not SOC 2 (Type I or Type II), not HDS, not HITRUST. There is no CE marking or FDA clearance, and no HIPAA attestation. On-Kare is ISO 27001-ready and ISO 27001 certification is planned; SOC 2 attestation is planned; the architecture is HIPAA-ready. A certificate will be listed here, with its auditor, scope and validity date, only once it is issued.
What can be shared today
Write to security@on-kare.org with the entity name and the review it is for. We share our security documentation and answer security questionnaires under the usual confidentiality terms. A HIPAA Business Associate Agreement will be offered once the On-Kare contracting entity, currently being incorporated, exists.
This page is part of a platform of 2,156 clinical and operational capabilities across 8 business domains.
Explore the catalogueContinue
Security contact
Coordinated disclosure and documentation requests: security@on-kare.org.
security@on-kare.orgLegal review: 2026-08-24