CentralReach Completes SOC 2 Type 2 Annual Certification for Security Operations and Data Protection Services

Fort Lauderdale, FL – April 6, 2022 – CentralReach, the leading provider of electronic medical record (EMR), practice management, and clinical solutions that enable Applied Behavior Analysis (ABA) and related behavioral health practices to deliver quality autism care for superior outcomes, announced today that it has successfully completed its annual  Service Organization Control (SOC) 2 Type 2 audit, making it one of the only EMRs in the ABA software market to receive certification for this best-in-class privacy and security assessments.

Conducted by the independent accounting and consulting firm, BDO, the audit found that CentralReach’s operational policies, research and development functions, data protection, and privacy protocols, and other security practices and procedures met or exceeded the high standards of SOC2 Type 2 compliance,  and underscores CentralReach’s commitment to safeguarding client data at the highest level.

“Successfully completing our annual SOC2 Type 2 assessment with BDO gives our customers the assurance that we remain steadfast in our commitment to provide the highest level of privacy and data security available in our industry,” said CentralReach Chief Legal and Compliance Officer, Perry Pappas. “Complying with the rigorous privacy and security policies, practices and procedures required in a SOC2 Type2 audit exemplifies our continuing investment  in industry-leading initiatives that keep CentralReach at the forefront in privacy and security measures in our software platforms and services."

What is SOC Type 2 Certification?

SOC 2 Type 2 reports are assurance reports that provide industry-wide acknowledgment that an organization adheres to trust service principles set by the American Institute of Certified Public Accountants. SOC reports deliver valuable information for clients and partners, enabling them to assess the quality of security provided by providers.

In addition to adhering to SOC 2 Type 2 privacy and security measures, CentralReach also follows other industry best practices including HIPAA standards, verified by BDO as well, and TRUSTe certification of its privacy policies and practices.