SOC 2 Type II
CertifiedAnnual audit verifying security, availability, and confidentiality controls.
SECURITY
Enterprise-grade security
Champ runs operations against your most sensitive systems: payer portals, employee records, financial filings. Every action is encrypted, scoped, and reconstructable. Compliance isn't a checkbox here; it's something we can show you.
Certifications & Compliance
Independent verification of our security practices.
HIPAA
CompliantMeets Health Insurance Portability & Accountability Act requirements. BAAs available.
CCPA
CompliantMeets California Consumer Privacy Act requirements for consumer data privacy.
Security Features
Comprehensive security controls at every layer.
Encryption
- AES-256 encryption for data at rest
- TLS 1.3 for data in transit
- Customer-managed encryption keys available
Access Control
- Role-based access control (RBAC)
- SSO/SAML 2.0 integration
- Multi-factor authentication (MFA)
- IP allowlisting
Infrastructure
- Hosted on enterprise-grade cloud providers
- Geographic data residency options
- Automatic failover and disaster recovery
- 99.9% uptime SLA
Monitoring
- 24/7 security monitoring
- Intrusion detection systems
- Regular vulnerability scanning
- Incident response procedures
Trust Center
Access our comprehensive security documentation including our SOC 2 Type II report, penetration test summaries, and security questionnaires through our Trust Center.