Compliance

  • Certifications and full audit reports can be downloaded via the in/site business intelligence platform at any time and on-demand.
    • vXchnge has achieved the following certificates supporting our Compliance goals of Information Security: ISO 27001:2013, SSAE 18 Type 2, SOC1 Type 2, HIPAA/HITECH, PCI: DSS 3.2.
    • Full Audit Reports are available via the in\site business intelligence tool using the Reports Tab, Compliance Reports.
  • Audit periods
    • Certificates are valid from June of the current year through May of the following year.
    • Bridge Letters are made available for customers on-demand via in\site.
  • GDPR
    • vXchnge understands the need for supporting those customers who fall within the scope of GDPR; specifically, the treatment and protection of an individual’s Personal Identifiable Information (PII). vXchnge maintains an ISO 27001 Certificate and has verified our standards to support Information Security across our internal systems. vXchnge has implemented incremental procedures to address PII Removal. Primary control of the customer Contact Records is controlled/managed by the customer and contained in the in\site Customer Profile. Should an individual’s PII Removal be requested beyond those in\site Customer Contact Records, please submit the request via a support ticket.