Trust Center
At Liberty Dental Plan, protecting our members’ and providers’ data is important to everything we do. We follow a security-first mindset from design through deployment. This will ensure our platforms and operations meet the highest standards in privacy, security, compliance, and availability.
Visit our Trust Center at trust-center.libertydentalplan.com to explore how we protect your trust through rigorous security controls, industry-recognized certifications, real-time transparency, and a culture of accountability that prioritizes your data’s safety at every level.
HIPAA and HITECH compliance: We meet and exceed the administrative, technical, and physical safeguards required under HIPAA's Security Rule.
NIST alignment: We apply NIST standards across core security areas such as access controls, data protection, and incident response.
Governance and risk oversight: Our information security program is governed by internal policies and procedures, subject to regular executive and third-party review.
Identity and access management: Least privilege, strong authentication (MFA), and single sign-on (SSO) are enforced across all critical systems.
Cyber hygiene and monitoring: We partner with federal agencies such as the U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (DHS/CISA) for continuous external scanning. We maintain internal vulnerability management and logging tools.
Security awareness and training: All Liberty workforce members receive regular training on secure practices, phishing detection, and data handling procedures.
Supply chain security: We conduct formal vendor risk assessments to ensure third parties uphold Liberty's privacy and security standards.
Secure infrastructure and operations
Availability and uptime: Our cloud-hosted services are engineered for 99.9% uptime, supported by geo-redundant data centers and failover capabilities.
Data encryption: We use AES-256 encryption for data at rest and TLS 1.2+ for data in transit, with certificates issued by DigiCert, meeting FIPS 140-2 Level 3 standards.
Application security: Development pipelines are built with secure coding practices, automated vulnerability scans, and peer-reviewed changes prior to deployment.


