At EvolutionIQ, we believe trust is earned — not declared.

That’s why I’m proud to share that EvolutionIQ's Disability Platform, Individual Disability Market Platform, and Workers Compensation Platform — all hosted on Google Cloud Platform (GCP) — have officially achieved HITRUST r2 Certification. This milestone isn’t just a compliance checkbox: it reflects our company-wide commitment to protecting the sensitive data entrusted to us by insurers, partners, and claimants.

Why this certification matters
The HITRUST r2 Certification is one of the most rigorous and respected frameworks in information security, harmonizing requirements from federal and state regulations and industry standards into a single, comprehensive framework. Earning it places EvolutionIQ among a group of organizations that are recognized globally for proactively managing cybersecurity and data privacy risks.

This kind of assurance is becoming essential in a digital-first, cloud-native world. As Phil Venables, (ex) CISO of Google Cloud has said -compliance and certification are just the starting point. It’s how organizations operationalize that commitment that makes the difference. At EvolutionIQ, operationalizing security is exactly what we do.
‍

‍

The work behind the badge
This certification validates the strength of our security program — a program built on clear accountability and continuous improvement:

• Senior Leadership sets the strategic direction and oversees security governance.
  
  
• Security Analysts and Engineers monitor, investigate, and strengthen our defenses daily.
  
  
• We regularly conduct risk assessments, align with regulatory requirements like HIPAA and ISO27001, and ensure compliance through audits and corrective actions.
  
  
• We maintain robust vendor management practices, from due diligence to ongoing monitoring.
  
  
• And we drive a culture of security awareness across the organization — because security is everyone’s responsibility.

As Gartner emphasizes, outcome-driven metrics enable organizations to benchmark their security maturity against industry frameworks like HITRUST. This kind of measurement allows businesses to focus on what truly reduces risk — turning security from a static checklist into a dynamic, results-driven function.

A commitment to keep improving
Earning the HITRUST r2 Certification isn’t the finish line. The security landscape changes daily, and we’re committed to evolving with it: strengthening our controls, learning from incidents, and staying aligned with industry best practices.

At EvolutionIQ, security is woven into everything we build and do — so our clients can focus on transforming claims management, confident that data protection is always at the core.

Thank you to our entire security and engineering teams whose dedication made this possible — and to our clients for trusting us as your partner.

If you'd like to learn more about how we secure your data or our approach to security, let’s connect.