Our Commitment
Security and Compliance Focused
OSG recognizes the trust you place in us, and we take that responsibility seriously. We continually invest in the people, processes and technology that protect the confidentiality, integrity, availability and security of all client-provided data, so our controls and standards reflect current best practices and industry recommendations.
Recognized Standards
Credentials You Can Take to Your Risk Team
Our compliance program is built on recognized industry standards, with independent audits conducted annually, so your audit, procurement and IT security teams can move forward with confidence.
SOC Audits
Annual SOC audits by an independent third-party firm, with reports aligned to your services available on request.
PCI DSS Partners
Digital payments delivered through strategic partners certified annually at PCI Service Level 1, the most rigorous tier.
HITRUST
HITRUST certification covering select in-scope healthcare offerings.
HIPAA
Healthcare offerings built to follow HIPAA standards for protected health information.
What Each Credential Covers
Built for Regulated Industries
Depending on your business need, we align our services to your requirements and to the standards of the industry you serve.
SOC Audits
An independent third-party audit firm performs Service Organization Control (SOC) audits of our in-scope service offerings annually. The resulting reports provide an unbiased view of the quality and effectiveness of our data protection practices and processing controls. Reports aligned with the services you use are available upon request.
Most relevant for
All clients, including vendor risk, audit and procurement reviews
PCI DSS Partners
Our digital payment solutions are delivered through strategic partners that certify annually under current Payment Card Industry Data Security Standards (PCI DSS) at Service Level 1, confirming that cardholder data is handled under the standard’s most rigorous requirements.
Most relevant for
Credit unions, financial services, utilities and any organization accepting card payments
HITRUST
Select in-scope healthcare offerings at OSG hold HITRUST r2 certification, the most comprehensive level of HITRUST assessment, built on the HITRUST CSF. The certification validates a risk-based set of controls, tailored to each offering’s environment and drawn from multiple standards and regulations, through independent third-party testing and HITRUST Alliance quality review.
Most relevant for
Health systems, providers and health plans
HIPAA
OSG offers several healthcare solutions built to follow HIPAA standards, so statements, notices and patient communications containing protected health information are handled with appropriate safeguards.
Most relevant for
Healthcare organizations, health plans and benefits administrators