Colocation in Toronto: TOR2 Data Center

HIPAA Assessment

The HIPAA Security Rule includes 22 Standards and 50 Implementation Specifications and is applicable to all business associates.

The HITECH Breach Notification Rule includes 4 Standards and 9 Implementation Specifications of which a subset is applicable to business associates.

Cologix receives an annual independent third-party assessment of its controls in relation to the HIPAA Security Rule and HITECH Breach Notification Rule.

SOC 1 Type 2

The controls addressed in a SOC 1 examination are those that Cologix implements at its sole discretion to prevent, detect and correct, errors or omissions in the information it provides to its customers.

Cologix undergoes an annual SOC 1 Type 2 examination that opines on management’s description of a System and Organization’s system, the suitability of the design and operating effectiveness of its controls.

SOC 2 Type 2

SOC 2 reports are attestation reports that opine on an organization’s controls that are relevant to the AICPA’s Trust Services Categories and related Criteria.

Security– Information and systems are protected against unauthorized access, unauthorized disclosure of information, and damage to systems that could compromise the availability, integrity, confidentiality, and privacy of information or systems and affect the entity’s ability to meet its objectives.

Availability – Information and systems are available for operation and use to meet the entity’s objectives.

PCI DSS Validation

PCI DSS applies to all entities, both service providers and merchants, that store, process, and/or transmit cardholder data.  PCI DSS evaluates a merchant’s or service provider’s controls to protect payment card data from unauthorized access or use. This includes a set of technical and operational controls, including physical security, and ongoing security operations to maintain a compliant security posture year-round.