Compliance & Standards
Every framework. Every page. On the record.
Conceptual Health is a regulated healthcare network operating under HIPAA, SOC 2, HITRUST, GDPR, state medical practice acts, FDA pre-cert, and money-transmitter law in 49 states. This page is the index. The threaded interior is the long-form. The regulator portal is the cleared-access door.
Frameworks
Twelve we live under, eleven we honor.
Tap any card for the threaded posture: scope, controls, audit cadence, attestation document, last-tested date, and the named owner inside the company.
Coverage matrix
Which framework applies to which surface.
Conceptual Health is not one product — it is a network. Some frameworks apply network-wide, others scope to specific surfaces. This matrix is the truth table.
● Full coverage · ◐ Partial / scope-limited · — Not applicable
Document vault
The papers, signed and dated.
Public documents are downloadable. Audit-summary and pen-test documents are gated to NDA-signed enterprise customers and regulators-with-credentials via the regulator portal.
For regulators & auditors
A door, not a hallway. Cleared access in 24 hours.
If you represent OCR, HHS, FDA, FTC, SEC, a state attorney general, a state DOI, a state medical board, or an accredited audit firm, the regulator portal grants credentialed access to gated documents (SOC 2 detail, pen-test reports, breach forensics, AI model cards, training records) within 24 hours of identity verification.
Named, on the record
Who to call. By name. By role.
Compliance is people, not process. Every framework has a named owner inside the company. For HIPAA-covered concerns, our Privacy Officer responds in one business day. For breach-coordination, our SOC is reachable 24/7.
Privacy Officer
privacy@conceptualhealth.com · +1 (555) 010-PRIV
HIPAA inquiries, individual rights requests (access, amendment, accounting), accounting-of-disclosures, Notice of Privacy Practices.
Chief Compliance Officer
cco@conceptualhealth.com · +1 (555) 010-COMP
Framework-level matters, regulatory correspondence, audit coordination, OCR/HHS/AG inquiries, MOU/MOA negotiation.
Chief Information Security Officer
ciso@conceptualhealth.com · +1 (555) 010-CISO
Security architecture, SOC 2 / HITRUST / NIST, vulnerability disclosure (security.txt), penetration testing windows, vendor risk reviews.
24/7 Security Operations Center
soc@conceptualhealth.com · +1 (555) 010-SOC0
Active incidents, suspected breach reports, government emergency-access requests under 45 CFR 164.512.