{"id":2254,"date":"2026-07-09T12:54:43","date_gmt":"2026-07-09T12:54:43","guid":{"rendered":"https:\/\/www.petal-health.com\/?p=2254"},"modified":"2026-07-09T13:00:38","modified_gmt":"2026-07-09T13:00:38","slug":"soc-2-type-2-healthcare","status":"publish","type":"post","link":"https:\/\/www.petal-health.com\/en\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/","title":{"rendered":"What&#8217;s a SOC 2 Type 2 report? Why it matters in healthcare"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2254\" class=\"elementor elementor-2254\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-413f683 e-con-full e-flex e-con e-parent\" data-id=\"413f683\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-50e6dbd e-con-full e-flex e-con e-child\" data-id=\"50e6dbd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-da2b1cf e-con-full e-flex e-con e-child\" data-id=\"da2b1cf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-91f4788 elementor-widget elementor-widget-post-info\" data-id=\"91f4788\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-e2e55fa elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.petal-health.com\/en\/blog\/2026\/07\/09\/\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-calendar\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M12 192h424c6.6 0 12 5.4 12 12v260c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V204c0-6.6 5.4-12 12-12zm436-44v-36c0-26.5-21.5-48-48-48h-48V12c0-6.6-5.4-12-12-12h-40c-6.6 0-12 5.4-12 12v52H160V12c0-6.6-5.4-12-12-12h-40c-6.6 0-12 5.4-12 12v52H48C21.5 64 0 85.5 0 112v36c0 6.6 5.4 12 12 12h424c6.6 0 12-5.4 12-12z\"><\/path><\/svg>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t\t\t\t<time>July 9, 2026<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f6dc37a elementor-widget elementor-widget-heading\" data-id=\"f6dc37a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Key takeaways<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39491c3 elementor-widget elementor-widget-text-editor\" data-id=\"39491c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<ol><li><b><span data-contrast=\"none\">Independent audits build confidence:<\/span><\/b><span data-contrast=\"none\">\u00a0SOC 2 Type 2 provides third-party evidence that a vendor&#8217;s security controls\u00a0operate\u00a0effectively over time.<\/span><\/li><li><b><span data-contrast=\"none\">Security supports uninterrupted care:\u00a0<\/span><\/b><span data-contrast=\"none\">Strong operational controls limit critical disruptions that negatively impact patients and care teams.<\/span><\/li><li><b><span data-contrast=\"none\">SOC 2 is\u00a0one\u00a0part\u00a0of effective security:\u00a0<\/span><\/b><span data-contrast=\"none\">The strongest healthcare technology partners combine independent audits with Canadian data hosting, interoperability, encryption, and continuous monitoring.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:720,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279,&quot;335559991&quot;:360}\">\u00a0<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6adab96 elementor-widget elementor-widget-text-editor\" data-id=\"6adab96\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">A SOC 2 Type 2 report is an independent audit that verifies whether an organization&#8217;s security controls work effectively over time. For healthcare teams evaluating technology vendors, it provides objective evidence that sensitive data is protected through established, consistent security practices.<\/span><\/p><p><span data-contrast=\"none\">Modern healthcare requires network decision-makers\u00a0to\u00a0become\u00a0familiar with SOC 2 Type 2\u00a0reports.<\/span><\/p><p><span data-contrast=\"none\">This is because strong data protection is\u00a0critical for patients and providers.<\/span><\/p><p><span data-contrast=\"none\">Healthcare cyberattacks\u00a0<\/span><a href=\"https:\/\/health-isac.org\/health-sector-heartbeat-q4-2025\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">increased by 21%<\/span><\/a><span data-contrast=\"none\">\u00a0globally in 2025.\u00a0Considering that\u00a0<\/span><a href=\"https:\/\/www.ibm.com\/reports\/data-breach\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">cyberattacks costing healthcare organizations more<\/span><\/a><span data-contrast=\"none\">\u00a0than other groups at $10.1M per attack on average, healthcare organizations\u2014from network decision-makers to frontline physicians\u2014need to understand\u00a0<\/span><a href=\"https:\/\/www.petal-health.com\/en\/blog\/cybersecurity\/6-cybersecurity-best-practices-healthcare\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">cybersecurity\u00a0best practices<\/span><\/a><span data-contrast=\"none\">.<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"122\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"none\">Remember:<\/span><\/b><span data-contrast=\"none\"> The public credibility and fiscal security of healthcare teams\u00a0rely\u00a0on ensuring patient data is protected.<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f4778cf elementor-widget elementor-widget-text-editor\" data-id=\"f4778cf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><b><span data-contrast=\"none\">Choosing the right technology partner therefore carries significant responsibility.<\/span><\/b><span data-contrast=\"none\"> One of the most widely recognized ways vendors\u00a0demonstrate\u00a0this commitment is through a SOC 2 Type 2 report.<\/span><\/p><p><span data-contrast=\"none\">Read on to learn what a SOC 2 Type 2 report is, how it works, and why it should be part of every healthcare organization&#8217;s vendor evaluation process.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ba91af8 e-con-full e-flex e-con e-child\" data-id=\"ba91af8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-424c393 elementor-widget elementor-widget-heading\" data-id=\"424c393\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What is a SOC 2 Type 2 report?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65b52db elementor-widget elementor-widget-text-editor\" data-id=\"65b52db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">A SOC 2 Type 2 report is an independent audit that evaluates how an organization protects customer data through its security controls and operational processes.<\/span><\/p><p><span data-contrast=\"none\">The\u00a0<\/span><a href=\"https:\/\/www.bdc.ca\/en\/articles-tools\/entrepreneur-toolkit\/templates-business-guides\/glossary\/system-organization-controls-2\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">framework was developed<\/span><\/a><span data-contrast=\"none\">\u00a0by the American Institute of Certified Public Accountants.\u00a0It\u2019s\u00a0commonly used by cloud software providers that store or process sensitive information\u00a0and allows organizations\u00a0to\u00a0review an assessment performed by an independent third party.<\/span><\/p><p><span data-contrast=\"none\">SOC 2 audits evaluate controls against the\u00a0<\/span><span data-contrast=\"auto\">Trust Services Criteria<\/span><span data-contrast=\"none\">, which include:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"124\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Security<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"124\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">Availability<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"124\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Processing integrity<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"124\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"none\">Confidentiality<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"124\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"none\">Privacy<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f2bbb9f elementor-widget elementor-widget-text-editor\" data-id=\"f2bbb9f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW45382150 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW45382150 BCX0\">T<\/span><span class=\"NormalTextRun SCXW45382150 BCX0\">hese controls help\u00a0<\/span><span class=\"NormalTextRun SCXW45382150 BCX0\">demonstrate<\/span><span class=\"NormalTextRun SCXW45382150 BCX0\">\u00a0that a vendor has\u00a0<\/span><span class=\"NormalTextRun SCXW45382150 BCX0\">established<\/span><span class=\"NormalTextRun SCXW45382150 BCX0\"> processes to protect data while supporting reliable system performance.<\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-122c39d elementor-widget elementor-widget-text-editor\" data-id=\"122c39d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">3,500+ worldwide customer deployments benefit from Petal\u2019s top-grade security.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559738&quot;:240,&quot;335559740&quot;:360}\">\u00a0<\/span><\/p><p><strong><a href=\"https:\/\/www.petal-health.com\/en\/security-compliance\/\" target=\"_blank\" rel=\"noopener\">Learn more<\/a><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cdabb5e e-con-full e-flex e-con e-child\" data-id=\"cdabb5e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-02f3b0a elementor-widget elementor-widget-heading\" data-id=\"02f3b0a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why does SOC 2 Type 2 matter in healthcare?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ee2a429 elementor-widget elementor-widget-text-editor\" data-id=\"ee2a429\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW71088269 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW71088269 BCX0\">Know how Type 1 and Type 2 compare before reviewing the security of your vendor or prospective vendor.<\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2a1bca7 elementor-widget elementor-widget-image\" data-id=\"2a1bca7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2-768x512.png\" class=\"attachment-medium_large size-medium_large wp-image-2265\" alt=\"A graphic compares SOC 2 Type 1 and SOC Type 2 evaluations.\" srcset=\"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2-768x512.png 768w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2-300x200.png 300w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2-1024x683.png 1024w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2-18x12.png 18w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2-600x400.png 600w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/SOC-2-Type-1-vs-Type-2.png 1536w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-21421fe elementor-widget elementor-widget-text-editor\" data-id=\"21421fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW227806273 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW227806273 BCX0\">For healthcare organizations evaluating long-term technology partners, Type 2\u00a0<\/span><span class=\"NormalTextRun SCXW227806273 BCX0\">provides<\/span><span class=\"NormalTextRun SCXW227806273 BCX0\"> greater assurance because it reflects ongoing operational discipline rather than a single snapshot.<\/span><\/span><\/p><p><strong><span class=\"TextRun SCXW53877694 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW53877694 BCX0\">Summary:<\/span><\/span><\/strong><span class=\"TextRun SCXW53877694 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW53877694 BCX0\"> A SOC 2 Type 2 report provides independent proof that a vendor&#8217;s security controls work consistently over time.<\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2d45d3a e-con-full e-flex e-con e-child\" data-id=\"2d45d3a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-7cb9cd9 e-con-full e-flex e-con e-child\" data-id=\"7cb9cd9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fb9a0aa elementor-widget elementor-widget-heading\" data-id=\"fb9a0aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What should healthcare leaders ask technology vendors?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d2d05a8 elementor-widget elementor-widget-text-editor\" data-id=\"d2d05a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">A SOC 2 Type 2 report is an important part of vendor due\u00a0diligence and risk\u00a0management, but it\u00a0shouldn&#8217;t\u00a0be the only question organizations ask.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">To glean a clearer idea of a vendor\u2019s ability to effectively\u00a0host your data, ask:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"126\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Do you\u00a0maintain\u00a0a current SOC 2 Type 2 report?\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"126\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">How often are independent audits completed?\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"126\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Where is healthcare data hosted?\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"126\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">How do you manage backups and disaster recovery?<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4df92de elementor-widget elementor-widget-text-editor\" data-id=\"4df92de\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><b><span data-contrast=\"auto\">These answers support effective Vendor risk management \/ Third-party risk management.<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Third-party risk has become one of healthcare&#8217;s biggest cybersecurity challenges because vendors create significant downstream exposure.\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"130\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559683&quot;:0,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">In 2025 alone,\u00a0<\/span><a href=\"https:\/\/www.hipaajournal.com\/healthcare-data-breach-statistics\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">772 large healthcare data breaches were reported<\/span><\/a><span data-contrast=\"auto\">, with hacking and IT incidents now the leading cause.\u00a0A ransomware attack on Ontario Medical Supply, a third-party vendor supporting Ontario Health\u00a0atHome,\u00a0<\/span><a href=\"https:\/\/globalnews.ca\/news\/11906406\/ontario-health-home-inform-ministry-health\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">exposed the personal information<\/span><\/a><span data-contrast=\"auto\">\u00a0of up to 200,000 patients.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:279}\">\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26e0acd elementor-widget elementor-widget-text-editor\" data-id=\"26e0acd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">As healthcare organizations become increasingly reliant on cloud software and connected systems, evaluating vendor security\u00a0is now\u00a0as important as protecting internal infrastructure.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Independent audits are particularly valuable. These\u00a0provide accountability beyond internal policies, while\u00a0also\u00a0demonstrating\u00a0a willingness to undergo regular external review.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><b><span data-contrast=\"auto\">Summary:<\/span><\/b><span data-contrast=\"auto\"> A SOC 2 Type 2 report should be one\u00a0component\u00a0of a broader\u00a0vendor\u00a0security\u00a0evaluation\u00a0that examines\u00a0transparency and operational maturity.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2998a7c elementor-widget elementor-widget-text-editor\" data-id=\"2998a7c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Petal users make 400,000+ shift trades and transfers per year.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><strong><a href=\"https:\/\/www.petal-health.com\/en\/nurses\/\" target=\"_blank\" rel=\"noopener\">Explore how<\/a><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-24ef28d e-con-full e-flex e-con e-child\" data-id=\"24ef28d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-df73f7f elementor-widget elementor-widget-heading\" data-id=\"df73f7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">SOC 2 Type 2 is one part of a strong healthcare security strategy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5579834 elementor-widget elementor-widget-text-editor\" data-id=\"5579834\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"auto\">No single certification guarantees complete security.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">Healthcare organizations should evaluate vendors using multiple indicators, including where data is hosted, how information is encrypted, whether interoperability standards are supported, and how security practices evolve over time.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:240,&quot;335559739&quot;:240}\">\u00a0<\/span><\/p><p><span data-contrast=\"auto\">For example, organizations\u00a0should\u00a0consider:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"127\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><a href=\"https:\/\/www.petal-health.com\/en\/blog\/health-authorities\/control-healthcare-data-hosted-in-canada\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">Canadian data hosting<\/span><\/a><span data-contrast=\"auto\">\u00a0and applicable privacy legislation\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"127\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Encryption for data in transit and at rest<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"127\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Secure interoperability through standards such as FHIR and HL7\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"127\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">Continuous monitoring and threat detection\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559738&quot;:0,&quot;335559739&quot;:0}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"127\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><span data-contrast=\"auto\">Annual independent security assessments<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-db493ec elementor-widget elementor-widget-text-editor\" data-id=\"db493ec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong><span class=\"TextRun SCXW35166675 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW35166675 BCX0\">Summary:<\/span><\/span><\/strong><span class=\"TextRun SCXW35166675 BCX0\" lang=\"EN-US\" xml:lang=\"EN-US\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW35166675 BCX0\">\u00a0SOC 2 Type 2 is an important indicator of vendor maturity, but\u00a0<\/span><span class=\"NormalTextRun SCXW35166675 BCX0\">it<\/span><span class=\"NormalTextRun SCXW35166675 BCX0\">\u2019<\/span><span class=\"NormalTextRun SCXW35166675 BCX0\">s<\/span><span class=\"NormalTextRun SCXW35166675 BCX0\"> most valuable when considered alongside broader security and compliance practices.<\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-24ae6a9 e-con-full e-flex e-con e-child\" data-id=\"24ae6a9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-02061c3 elementor-widget elementor-widget-heading\" data-id=\"02061c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Secure your patient and workforce data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d73013a elementor-widget elementor-widget-image\" data-id=\"d73013a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"611\" height=\"456\" data-src=\"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/Worforce-management.png\" class=\"attachment-medium_large size-medium_large wp-image-2261 lazyload\" alt=\"In the background is a digital calendar from Petal Scheduling, and in front of it, a smartphone with a similar calendar view.\" data-srcset=\"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/Worforce-management.png 611w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/Worforce-management-300x224.png 300w, https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/Worforce-management-16x12.png 16w\" data-sizes=\"(max-width: 611px) 100vw, 611px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 611px; --smush-placeholder-aspect-ratio: 611\/456;\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b76292f elementor-widget elementor-widget-text-editor\" data-id=\"b76292f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Petal\u2019s cloud solutions\u2014<\/span><a href=\"https:\/\/www.petal-health.com\/en\/petal-workforce\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">Workforce<\/span><\/a><span data-contrast=\"none\">,\u00a0<\/span><a href=\"https:\/\/www.petal-health.com\/en\/petal-billing\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">Billing<\/span><\/a><span data-contrast=\"none\">, and\u00a0<\/span><a href=\"https:\/\/www.petal-health.com\/en\/petal-patient-hub\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">Patient Hub<\/span><\/a><span data-contrast=\"none\">\u2014meet world-class security standards.<\/span><\/p><p><b><span data-contrast=\"none\">They\u2019re\u00a0also\u00a0<\/span><\/b><a href=\"https:\/\/www.petal-health.com\/en\/security-compliance\/\" target=\"_blank\" rel=\"noopener\"><b><span data-contrast=\"none\">100% Canadian-built and hosted<\/span><\/b><\/a><b><span data-contrast=\"none\">.<\/span><\/b><\/p><p><span data-contrast=\"none\">Clients\u00a0maintain\u00a0full ownership of their data.\u00a0It\u2019s\u00a0located\u00a0across multiple time zones for redundancy and resilience, including backups. Backups are tested regularly to ensure recoverability as needed. Each solution:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"123\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Meets global standards in interoperability (FHIR, HL7) and security (SOC 2 Type 2).<\/span><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"123\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\">And offers <a href=\"https:\/\/www.wiz.io\/academy\/detection-and-response\/soc-reports\">SOC 2 Type 3 summaries<\/a>.<\/li><\/ul><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"123\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">Aligns with GDPR and other global privacy frameworks.\u00a0\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:279}\">\u00a0<\/span><\/li><\/ul><ul><li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"123\" data-list-defn-props=\"{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"none\">Includes annual, independent audits.<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-160f534 elementor-widget elementor-widget-text-editor\" data-id=\"160f534\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span data-contrast=\"none\">Prioritize data security in your organization by choosing top-grade protection.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1131435 elementor-widget elementor-widget-text-editor\" data-id=\"1131435\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><b><span data-contrast=\"none\">Have confidence in your security infrastructure:\u00a0<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:0,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><strong><a href=\"https:\/\/www.petal-health.com\/en\/contact\/\" target=\"_blank\" rel=\"noopener\">Talk to a Petal\u00a0security\u00a0expert<\/a><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3b240a3 e-con-full e-flex e-con e-child\" data-id=\"3b240a3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3c58ea3 elementor-widget elementor-widget-heading\" data-id=\"3c58ea3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQs: SOC 2 Type 2 in healthcare<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d25a915 elementor-widget elementor-widget-text-editor\" data-id=\"d25a915\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><b><span data-contrast=\"none\">What is a SOC 2 Type 2 report?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">A SOC 2 Type 2 report is an independent audit that evaluates whether an organization&#8217;s security controls\u00a0operate\u00a0effectively over an extended period. It helps organizations verify that vendors consistently protect customer data.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><b><span data-contrast=\"none\">What&#8217;s\u00a0the difference between SOC 2 Type 1 and Type 2?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">SOC 2 Type 1 evaluates security controls at a single point in time. SOC 2 Type 2 assesses how well those controls perform over several months, providing stronger evidence of ongoing operational effectiveness.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><b><span data-contrast=\"none\">Is SOC 2 Type 2\u00a0required\u00a0for healthcare software?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Not necessarily. However, many healthcare organizations prefer vendors with SOC 2 Type 2 because it provides independent validation of security controls and supports vendor risk assessments.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><b><span data-contrast=\"none\">How often is a SOC 2 Type 2 audit performed?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">Most organizations complete SOC 2 Type 2 audits annually to\u00a0demonstrate\u00a0that their security controls continue to\u00a0operate\u00a0effectively and remain aligned with evolving risks.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><b><span data-contrast=\"none\">Does SOC 2 Type 2 guarantee compliance with healthcare privacy laws?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;201341983&quot;:0,&quot;335551550&quot;:1,&quot;335551620&quot;:1,&quot;335559685&quot;:0,&quot;335559737&quot;:0,&quot;335559738&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:279}\">\u00a0<\/span><\/p><p><span data-contrast=\"none\">No. SOC 2 Type 2 focuses on security controls rather than specific regulatory frameworks. Healthcare organizations should also evaluate factors, such as data residency and privacy legislation.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Healthcare organizations trust technology vendors with sensitive patient and staff data every day. Learn what a SOC 2 Type 2 report evaluates, why it matters for vendor selection, and which questions healthcare leaders should ask before choosing a software partner.<\/p>\n","protected":false},"author":2,"featured_media":2255,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[81,53,49,12,16,18,48],"tags":[52,50,112,40,51],"class_list":["post-2254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analytics","category-cybersecurity","category-data-management","category-health-authorities","category-healthcare-delivery-organizations","category-hospitals","category-security","tag-cybersecurity","tag-data-management","tag-data-privacy","tag-hdos","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.9 (Yoast SEO v27.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>What&#039;s a SOC 2 Type 2 report? Why it matters in healthcare - Petal<\/title>\n<meta name=\"description\" content=\"Learn what a SOC 2 Type 2 report is and why healthcare organizations should use it to evaluate tech vendors and strengthen data security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.petal-health.com\/en\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What&#039;s a SOC 2 Type 2 report? Why it matters in healthcare\" \/>\n<meta property=\"og:description\" content=\"Learn what a SOC 2 Type 2 report is and why healthcare organizations should use it to evaluate tech vendors and strengthen data security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.petal-health.com\/en\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/\" \/>\n<meta property=\"og:site_name\" content=\"Petal\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/petalhealth\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-09T12:54:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-09T13:00:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Emiliana Braga\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@petalhealth\" \/>\n<meta name=\"twitter:site\" content=\"@petalhealth\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Emiliana Braga\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/\"},\"author\":{\"name\":\"Emiliana Braga\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#\\\/schema\\\/person\\\/bce6a816a43e7e686878197e92c45f45\"},\"headline\":\"What&#8217;s a SOC 2 Type 2 report? Why it matters in healthcare\",\"datePublished\":\"2026-07-09T12:54:43+00:00\",\"dateModified\":\"2026-07-09T13:00:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/\"},\"wordCount\":1027,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.petal-health.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg\",\"keywords\":[\"cybersecurity\",\"data management\",\"data privacy\",\"HDOs\",\"security\"],\"articleSection\":[\"Analytics\",\"Cybersecurity\",\"Data management\",\"Health Authorities\",\"Healthcare Delivery Organizations\",\"Hospitals\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/\",\"url\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/\",\"name\":\"What's a SOC 2 Type 2 report? Why it matters in healthcare - Petal\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.petal-health.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg\",\"datePublished\":\"2026-07-09T12:54:43+00:00\",\"dateModified\":\"2026-07-09T13:00:38+00:00\",\"description\":\"Learn what a SOC 2 Type 2 report is and why healthcare organizations should use it to evaluate tech vendors and strengthen data security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.petal-health.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.petal-health.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg\",\"width\":2560,\"height\":1707,\"caption\":\"In the foreground, healthcare providers' hands point to a digital pad with health data on it. In the background, a hospital patient lays in a bed.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/blog\\\/healthcare-delivery-organizations\\\/soc-2-type-2-healthcare\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.petal-health.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What&#8217;s a SOC 2 Type 2 report? Why it matters in healthcare\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/\",\"name\":\"Petal\",\"description\":\"Improving Healthcare Real-Time\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#organization\"},\"alternateName\":\"Petal\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#organization\",\"name\":\"Petal Health\",\"url\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.petal-health.com\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Petal_Logo_signin.png\",\"contentUrl\":\"https:\\\/\\\/www.petal-health.com\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/Petal_Logo_signin.png\",\"width\":1442,\"height\":742,\"caption\":\"Petal Health\"},\"image\":{\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/petalhealth\\\/\",\"https:\\\/\\\/x.com\\\/petalhealth\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/petalhealth\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC7qI1eOzi8yd6U3GBKo8JMQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.petal-health.com\\\/fr\\\/#\\\/schema\\\/person\\\/bce6a816a43e7e686878197e92c45f45\",\"name\":\"Emiliana Braga\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d8359cf2cb79f767ce958630278e2e9533695f5039d1cfbc4871af1657b0294e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d8359cf2cb79f767ce958630278e2e9533695f5039d1cfbc4871af1657b0294e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d8359cf2cb79f767ce958630278e2e9533695f5039d1cfbc4871af1657b0294e?s=96&d=mm&r=g\",\"caption\":\"Emiliana Braga\"},\"url\":\"https:\\\/\\\/www.petal-health.com\\\/en\\\/blog\\\/author\\\/ebragapetal-health-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What's a SOC 2 Type 2 report? Why it matters in healthcare - Petal","description":"Learn what a SOC 2 Type 2 report is and why healthcare organizations should use it to evaluate tech vendors and strengthen data security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.petal-health.com\/en\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/","og_locale":"en_US","og_type":"article","og_title":"What's a SOC 2 Type 2 report? Why it matters in healthcare","og_description":"Learn what a SOC 2 Type 2 report is and why healthcare organizations should use it to evaluate tech vendors and strengthen data security.","og_url":"https:\/\/www.petal-health.com\/en\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/","og_site_name":"Petal","article_publisher":"https:\/\/www.facebook.com\/petalhealth\/","article_published_time":"2026-07-09T12:54:43+00:00","article_modified_time":"2026-07-09T13:00:38+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg","type":"image\/jpeg"}],"author":"Emiliana Braga","twitter_card":"summary_large_image","twitter_creator":"@petalhealth","twitter_site":"@petalhealth","twitter_misc":{"Written by":"Emiliana Braga","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#article","isPartOf":{"@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/"},"author":{"name":"Emiliana Braga","@id":"https:\/\/www.petal-health.com\/fr\/#\/schema\/person\/bce6a816a43e7e686878197e92c45f45"},"headline":"What&#8217;s a SOC 2 Type 2 report? Why it matters in healthcare","datePublished":"2026-07-09T12:54:43+00:00","dateModified":"2026-07-09T13:00:38+00:00","mainEntityOfPage":{"@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/"},"wordCount":1027,"commentCount":0,"publisher":{"@id":"https:\/\/www.petal-health.com\/fr\/#organization"},"image":{"@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#primaryimage"},"thumbnailUrl":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg","keywords":["cybersecurity","data management","data privacy","HDOs","security"],"articleSection":["Analytics","Cybersecurity","Data management","Health Authorities","Healthcare Delivery Organizations","Hospitals","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/","url":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/","name":"What's a SOC 2 Type 2 report? Why it matters in healthcare - Petal","isPartOf":{"@id":"https:\/\/www.petal-health.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#primaryimage"},"image":{"@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#primaryimage"},"thumbnailUrl":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg","datePublished":"2026-07-09T12:54:43+00:00","dateModified":"2026-07-09T13:00:38+00:00","description":"Learn what a SOC 2 Type 2 report is and why healthcare organizations should use it to evaluate tech vendors and strengthen data security.","breadcrumb":{"@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#primaryimage","url":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg","contentUrl":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-scaled.jpg","width":2560,"height":1707,"caption":"In the foreground, healthcare providers' hands point to a digital pad with health data on it. In the background, a hospital patient lays in a bed."},{"@type":"BreadcrumbList","@id":"https:\/\/www.petal-health.com\/blog\/healthcare-delivery-organizations\/soc-2-type-2-healthcare\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.petal-health.com\/en\/"},{"@type":"ListItem","position":2,"name":"What&#8217;s a SOC 2 Type 2 report? Why it matters in healthcare"}]},{"@type":"WebSite","@id":"https:\/\/www.petal-health.com\/fr\/#website","url":"https:\/\/www.petal-health.com\/fr\/","name":"Petal","description":"Improving Healthcare Real-Time","publisher":{"@id":"https:\/\/www.petal-health.com\/fr\/#organization"},"alternateName":"Petal","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.petal-health.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.petal-health.com\/fr\/#organization","name":"Petal Health","url":"https:\/\/www.petal-health.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.petal-health.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2025\/12\/Petal_Logo_signin.png","contentUrl":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2025\/12\/Petal_Logo_signin.png","width":1442,"height":742,"caption":"Petal Health"},"image":{"@id":"https:\/\/www.petal-health.com\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/petalhealth\/","https:\/\/x.com\/petalhealth","https:\/\/www.linkedin.com\/company\/petalhealth\/","https:\/\/www.youtube.com\/channel\/UC7qI1eOzi8yd6U3GBKo8JMQ"]},{"@type":"Person","@id":"https:\/\/www.petal-health.com\/fr\/#\/schema\/person\/bce6a816a43e7e686878197e92c45f45","name":"Emiliana Braga","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d8359cf2cb79f767ce958630278e2e9533695f5039d1cfbc4871af1657b0294e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d8359cf2cb79f767ce958630278e2e9533695f5039d1cfbc4871af1657b0294e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d8359cf2cb79f767ce958630278e2e9533695f5039d1cfbc4871af1657b0294e?s=96&d=mm&r=g","caption":"Emiliana Braga"},"url":"https:\/\/www.petal-health.com\/en\/blog\/author\/ebragapetal-health-com\/"}]}},"featured_image_src":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-600x400.jpg","featured_image_src_square":"https:\/\/www.petal-health.com\/wp-content\/uploads\/2026\/07\/getty-images-1cbVqiUKcYA-unsplash-600x600.jpg","author_info":{"display_name":"Emiliana Braga","author_link":"https:\/\/www.petal-health.com\/en\/blog\/author\/ebragapetal-health-com\/"},"_links":{"self":[{"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/posts\/2254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/comments?post=2254"}],"version-history":[{"count":20,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/posts\/2254\/revisions"}],"predecessor-version":[{"id":2278,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/posts\/2254\/revisions\/2278"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/media\/2255"}],"wp:attachment":[{"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/media?parent=2254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/categories?post=2254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.petal-health.com\/en\/wp-json\/wp\/v2\/tags?post=2254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}