Cantata’s Commitment to Security
At Cantata, protecting your data and helping customers support their compliance obligations is our top priority. Our solutions are built on a foundation of security, privacy, and reliability. Arize, our EHR platform, is hosted in Microsoft Azure’s secure environment and adheres to industry-leading standards and regulatory frameworks.
Why You Can Trust Cantata
Cantata helps behavioral health and human services providers safeguard critical information through a comprehensive security program that combines trusted cloud infrastructure, industry-recognized security controls, continuous monitoring, and administrative safeguards.
Our systems undergo annual third-party audits and independent security assessments to maintain SOC 2 Type 2+ certification. We also align with ISO 27001/27002, HIPAA, SAMHSA 42 CFR Part 2, and NIST 800-53 standards to ensure best practices across our operations.
Our approach also includes:
- Data hosted in US-based data centers
- Security policies and operational controls designed for healthcare organizations
- Continuous security monitoring and vulnerability management
- Ongoing efforts to support regulatory and compliance requirements
Cantata Cloud Security
The Cantata Cloud environment is designed to deliver security, resilience, and reliability while reducing the operational burden on provider organizations.
Enterprise-Grade Hosting
The Cantata Cloud is hosted in Microsoft Azure, a platform trusted worldwide for its rigorous security standards and certifications. Your data resides in an environment that meets some of the most stringent compliance requirements in the industry.
Built for Resistance
Cantata’s cloud infrastructure is designed for reliability and availability. Multiple U.S.-based data centers support platform resilience, while encryption protects data both at rest and in transit using industry-standard cryptographic protocols.
Continuous Protection
Behind the scenes, continuous logging and monitoring of servers, firewalls, and network devices help us detect threats early and maintain operational integrity. These measures are reviewed and tested regularly to keep pace with evolving security challenges.
Business Continuity & Disaster Recovery
Cantata maintains documented backup and recovery processes designed to support business continuity, protect customer data, and minimize disruption. These processes are reviewed and tested periodically.
Designed for Customer Control
Organizations maintain control over their users, permissions, and security policies while benefiting from the operational advantages of a modern cloud platform. This approach supports flexibility without sacrificing governance or oversight.
Security Features in Arize
Security and privacy are embedded throughout Arize to help behavioral health and human services organizations protect sensitive information while supporting efficient care delivery.
Role-Based Access Controls
Administrators can control access to information based on user roles, responsibilities, programs, and organizational requirements. This helps ensure users see only the information necessary to perform their work.
Single Sign-On and Multi-Factor Authentication
Arize supports modern authentication methods, including single sign-on (SSO) and multi-factor authentication (MFA), helping organizations strengthen account security and simplify access management.
Transparency Through Auditing
Transparency is key to trust. Arize maintains detailed audit logs that help organizations track user activity, monitor changes, and support internal reviews or compliance efforts. Authorized users can review what changes were made, when they occurred, and who performed them.
Behavioral Health Privacy Controls
Behavioral health providers face unique privacy and confidentiality requirements. Arize includes capabilities that help organizations support HIPAA and 42 CFR Part 2 requirements, such as:
- Role-based security controls
- Consent management capabilities
- Sensitive data access controls
- Data segmentation options for protected information
Data Protection Built into Everyday Workflows
From documentation and care coordination to reporting and administration, Arize incorporates security safeguards designed to help organizations protect information without creating unnecessary barriers for staff.
FAQs
Customer data is hosted in secure cloud environments designed to support healthcare organizations and protect sensitive information through multiple layers of physical, technical, and administrative safeguards.
Data is protected through a combination of encryption, access controls, authentication safeguards, monitoring, security policies, and operational processes that work together to reduce risk and strengthen security.
Arize includes configurable privacy and consent-management capabilities that can help organizations support their obligations under HIPAA and 42 CFR Part 2. Customers remain responsible for configuring and using the platform in accordance with their legal, regulatory, and organizational requirements.
Yes. Administrators can configure permissions and role-based access settings to align with organizational policies and operational requirements.
Arize maintains audit logs that help organizations review user activity, monitor changes, and support compliance, governance, and security investigations when needed.
Cantata maintains business continuity and disaster recovery processes designed to support platform resilience, protect customer data, and minimize disruptions during unexpected events.
Yes, our systems undergo annual third-party audits and independent security assessments to maintain SOC 2 Type 2+ certification. We also align with ISO 27001/27002, HIPAA, SAMHSA 42 CFR Part 2, and NIST 800-53 standards to ensure best practices across our operations.
Yes. Cantata’s Trust Center provides access to our compliance reports, security assessments, controls, and related updates. It’s designed to help customers and prospective customers evaluate our security practices with greater transparency.