Security you can verify, not just trust.
Security questions from prospective or current customers can be directed to protect@intruno.com.
Our Security Foundation
Intruno was built for organizations that carry some of the most sensitive data there is: patient records. Because of that, security isn’t a layer we added after the fact, it’s the reason the product exists. We apply the same principle to how we operate as we apply to the access we help our customers monitor: activity should be intentional, monitored, and explainable.
Certifications and Compliance
Where Intruno holds current certifications or has completed independent audits, this section lists them along with the certifying body, the scope of assessment, and the date of the most recent review.
- ONC Certified Health IT — Intruno Patient Privacy Monitoring, version 8.3, certified December 7, 2021. Certification ID 15.05.05.3093.INTR.01.00.0.211207.
The full certification record, including the certification ID, the criteria in scope, and the required ONC disclaimer, is published under Certifications in Resources.
- SOC 2 Type II — examination performed by A-LIGN, covering the trust services criteria relevant to Security, for the period April 1, 2026 to June 30, 2026.
The SOC 2 report is confidential and is shared with customers and prospective customers under a non-disclosure agreement. To request a copy, contact us.
Infrastructure and Data Protection
Intruno runs on Amazon Web Services and applies encryption to protect data both in transit and at rest.
Access Controls
Access to Intruno’s systems and to customer data is restricted on a need-to-know basis and governed by authentication and authorization controls.
Backup and Availability
Intruno maintains backup practices designed to protect against data loss and to support service continuity.
Vulnerability Management
Intruno maintains practices to identify and remediate security vulnerabilities across its systems before they become risks to customer data.
Incident Response
Intruno maintains an incident response process for identifying, containing, and addressing security incidents.
Vendor and Subprocessor Security
Intruno works with a limited set of vendors and subprocessors to operate the platform, and we hold those vendors to security practices consistent with our own standards.
Security Questions
Security questions from prospective or current customers evaluating Intruno can be directed to: