Yes. Eternal Pro is built with HIPAA and SOC 2 compliance in mind and is independently verified by Oneleet. Our security, privacy, and operational controls are continuously assessed against industry-standard frameworks, including HIPAA safeguards and SOC 2 Trust Services Criteria.
We maintain a robust compliance program covering data encryption at rest and in transit, access controls, audit logging, vendor risk management, and incident response procedures. Customers can review our current compliance status, policies, and third-party verification details in our Trust Center.
For firms that require it, we also support Business Associate Agreements (BAAs) and provide additional compliance documentation upon request.
View full details in our Trust Center.
united states
