Trust Center

• HIPAA & HITECH Compliance: We meet and exceed the administrative, technical, and physical safeguards required under HIPAA's Security Rule.


• NIST Alignment: We apply NIST standards across core security areas such as access controls, data protection, and incident response.


• Governance & Risk Oversight: Our Information Security program is governed by internal policies and procedures, subject to regular executive and third-party review.


• Identity & Access Management: Least privilege, strong authentication (MFA), and Single Sign-On (SSO) are enforced across all critical systems.


• Cyber Hygiene & Monitoring: We partner with federal agencies such as the U.S. Department of Homeland Security Cybersecurity & Infrastructure Security Agency (DHS/CISA) for continuous external scanning, and maintain internal vulnerability management and logging tools.


• Security Awareness & Training: All Liberty workforce members receive regular training on secure practices, phishing detection, and data handling procedures.


• Supply Chain Security: We conduct formal vendor risk assessments to ensure third parties uphold Liberty's privacy and security standards.

Secure Infrastructure & Operations

• Availability & Uptime: Our cloud-hosted services are engineered for 99.9% uptime, supported by geo-redundant data centers and failover capabilities.


• Data Encryption: We use AES-256 encryption for data at rest and TLS 1.2+ for data in transit, with certificates issued by DigiCert, meeting FIPS 140-2 Level 3 standards.


• Application Security: Development pipelines are built with secure coding practices, automated vulnerability scans, and peer-reviewed changes prior to deployment.

Certifications & External Validations

HIPAA & HITECH

Liberty Dental Plan is compliant with the Health Insurance Portability and Accountability Act (HIPAA) and HITECH . These federal mandates establish standards for privacy and security of Protected Health Information (PHI).

📎 hhs.gov

 

HITRUST CSF Certified

We are proud to be HITRUST CSF certified. This demonstrates our alignment with rigorous healthcare regulations and industry best practices for security, privacy, and risk management.

📎 hitrustalliance.net

 

SOC 1 & SOC 2 Type II

Liberty has successfully completed SOC 1 and SOC 2 Type II certifications. These independent attestations confirm the success of our internal controls related to financial reporting and security.

📎 aicpa.org

 

Cyber Hygiene & DHS Partnership

Our public-facing systems are continuously scanned by the Cybersecurity and Infrastructure Security Agency (CISA) under the U.S. Department of Homeland Security.

• Vulnerability scanning of public IPv4 assets
• External exposure assessments to reduce attack surface

📎 cisa.gov