---
title: Gapcare Security | Trusted Data Protection & Certifications
description: Gapcare ensures data security with HITRUST and SOC 2 certifications, encryption, and regular third-party assessments.
---

ABOUT / SECURITY

# Security is more than a process. It’s our foundation.

Keeping your data safe and sound is our top priority at all times. We are proud and humbled to have earned the trust of our many esteemed partners.

![people enjoying
coffee outdoors](https://gapcare.health/hubfs/raw_assets/public/gapcare/assets/build/img/normal/group-3.jpg "people enjoying
coffee outdoors")

HITRUST CSF Certified

AICPA SOC2 Certified

#### Gapcare is proud to hold both HITRUST and SOC 2 certifications.

 With our industry-leading security features and policies, you can rest easy knowing your information is always protected.

## Secure. Reliable. Trusted.

 The country’s largest employers and health plans choose Gapcare because of our rigorous security standards.

![computer icon](https://gapcare.health/hubfs/raw_assets/public/gapcare/assets/build/img/icon/computer.svg)

Hosting

 We ensure the highest benchmarks in host and network encryption, patch management, physical security, and network security.

![sunset icon](https://gapcare.health/hubfs/raw_assets/public/gapcare/assets/build/img/icon/sunset.svg)

Continuity

 Our targeted uptime is 99.9% excluding maintenance. Want to see for yourself? Check out this week’s performance status.

![care icon](https://gapcare.health/hubfs/raw_assets/public/gapcare/assets/build/img/icon/care.svg)

External Assessments

 We enlist independent security firms to conduct annual third-party penetration tests to assess our site for vulnerabilities.

## We're data defenders

![girl With Computer](https://gapcare.health/hubfs/raw_assets/public/gapcare/assets/build/img/normal/girl-with-laptop-3.jpg)

For Partners

 While we’re a HIPAA covered entity in delivering the Omada program to our participants, we’re also the business associate of our customers—using data that you provide to check eligibility and conduct enrollment outreach activities. You’ll retain ownership of all data that you share with us, and we’ll protect it in accordance with our customer agreement and BAA.

![girl With Computer](https://gapcare.health/hubfs/raw_assets/public/gapcare/assets/build/img/normal/girl-with-laptop-4.jpg)

For Participants

 To individuals enrolled in our program, Omada delivers the Omada program as a health care provider and covered entity (like your doctor). We make absolutely certain that we safeguard your protected health information (PHI) according to the requirements of HIPAA and industry best practices.

## Empower Health for Your Entire workforce

 Achieve greater employee engagement and long-term health improvements with GapCare’s proven virtual care programs.

GapCare For Benefit Consultants

 Effective programs that organizations trust.

GapCare For Health Plans

Successful programs

GapCare For Systems & Providers

Proven programs

[GapCare for Employers ➔ ](https://gapcare.health/for-organization)

### Personalized Health Programs Just for You

[Am I Qualified?](https://gapcare.health/check-coverage)

 Disclaimer

 GapCare for Hypertension, Diabetes, and Weight Management is available at no cost to you when covered by your employer or health plan. Certain features and smart devices are only available if you meet program and clinical eligibility requirements. To check your eligibility for required health program, [click here](https://gapcare.health/check-coverage)