Why Providers Trust Cantata Health

Cantata’s commitment to security, availability, and privacy

AICPA SOC for Service ORganizations

Cantata Health’s commitment to secure, reliable billing is second to none. Our extensive expertise and use of leading cloud technology ensure our customers’ data remains safe and accessible, exceeding industry standards for privacy protection. With a deeply experienced team understanding strict compliance regulations, Cantata consistently delivers an unparalleled customer experience every time.

Secure Cloud Infrastructure

All SSAE21 SOC2 audits are not equal. Cantata’s application and cloud environment have undergone a stringent SSAE21 SOC2, Type I, II, and III audit of the Cantata controls, processes, and environments by a certified independent 3rd party accounting firm following AICPA standards. Cantata follows a ISO 27000 , HIPAA, and NIST security framework for all environments.

Cantata hosts our Software-as-a-service environments inside of Microsoft Azure hyperscale cloud environments. Each Azure facility is also audited to SSAE 18, SOC 2, PCIA standards, as well as many other standards. They are ISO 27001 certified, and they comply with HIPAA requirements. Each Azure region has multiple layers of physical and virtual security and is not accessible by any customer.

Cantata Health ensures its 24/7 Software-as-a-Service engineering infrastructure is safe and secure. We deploy it in the optimal Microsoft Azure cloud regions with stringent security protections, blazing fast networking solutions, and top-of-the-line operational controls – so you know your information stays safe!

Microsoft Azure Cloud

Unrivaled Security Services

We take security seriously. Cantata’s technology planning has best-of-industry protocols and tools in place, from robust login authorization to centralized authentication log aggregation and beyond. We have dedicated personnel monitoring all activities and securely managing host access – ensuring a safe experience for everybody involved!
We use various levels of firewalls on our corporate network as well as Microsoft Azure security infrastructure to ensure access only to authorized services and people.
Additional security services we provide:

Security Services

Timely Updates

Cantata’s development processes ensure timely, releases of new features and functionality into the enterprise applications. This rapid development process provides quick software corrections with constant improvement and enhancements to our award-winning applications. Functional updates are deployed at the customer’s discretion. Anything that modifies or delivers new functionality is delivered “off” and is only turned on at the customer’s choice to ensure the highest satisfaction levels.

Agile Development Cycle

Hosting Processes You Can Rely On

Cantata Health understands what it takes to deploy systems to meet the needs of complex provider organizations. Every deployment in the Cantata Cloud comes standard with four distinct environments: Build, Test, Train, and of course, Production.

Host Environments

And that’s just the beginning. Each environment is duplicated for disaster recovery and business continuity with the highest levels of recoverability, leveraging RPO (Recovery Point Objectives) of under 5 seconds and RTO (Recovery Time Objectives) of under 15 minutes.

Enterprise-level Availability

Performance

Our commitment to excellence has been recognized by a rigorous audit of our comprehensive processes, guaranteeing top-notch availability.
All servers are monitored at all times for processes, load, performance, services, users, network I/O, CPU/memory, and more. We use an external monitoring service to monitor the external availability of our customer applications from multiple locations throughout the U.S.
All databases and file attachments are backed up nightly, and snapshots are taken every 15 minutes of all database servers to allow for prompt, point-in-time recovery of systems and services. All backups are encrypted at rest and in motion, with replications of all backups stored in secured Azure repositories around the United States. Cantata also has documented policies and processes for recovering backup data in the event of a catastrophic incident at an Azure region, which are thoroughly tested on a regular basis.

Confidential & Encrypted Data Transmissions

Cantata Health ensures its 24/7 Software-as-a-Service engineering infrastructure is safe and secure. We deploy it in the optimal Microsoft Azure cloud regions with stringent security protections, blazing fast networking solutions, and top-of-the-line operational controls – so you know your information stays safe!

Cantata’s core application and cloud environment have undergone a stringent SSAE21 SOC2, Type I, II, and III audit of the Cantata applications, controls, and environments as certified by an independent 3rd party accounting firm following AICPA standards. Cantata follows a ISO 27000 , HIPAA, and NIST security framework for all environments.

Cantata hosts our Software-as-a-service environments inside of Microsoft Azure hyperscale cloud environments. Each Azure facility is also audited to SSAE 18, SOC 2, PCIA standards, as well as many other standards. They are ISO 27001 certified, and they comply with HIPAA requirements. Each Azure region has multiple layers of physical and virtual security and is not accessible by any customer.

Confidential & Encrypted

More About SOC Certification

The American Institute of Certified Public Accountants (AICPA)

Service Organization and Controls (SOC) reports providing an industry-wide acknowledgment that a company adheres to trust service principles.
The American Institute of Certified Public Accountants (AICPA) sets these principles and controls. SOC reports deliver valuable information that can be used to assess the quality of the security provided by vendors.