The HITRUST CSF is a comprehensive security and privacy framework that incorporates various standards (HIPAA, NIST, ISO) into a single assessment. It allows organizations to "assess once, report many."

These represent different levels of assurance. e1 is a low-effort foundational assessment. i1 is a rapid, medium-assurance assessment valid for 1 year. r2 (formerly the full HITRUST validation) provides the highest level of assurance and is valid for 2 years.

Inheritance allows you to rely on the security controls already implemented by your cloud providers (like AWS or Azure). Instead of proving physical security yourself, you simply inherit their certification, significantly reducing your audit workload.

If you don't perfectly score on a control, you must submit a CAP to HITRUST explaining how you will remediate the gap. Our platform helps you draft and manage these plans to ensure certification success.