Compliance
Multi-Health Systems Inc. (MHS) is committed to complying with the established guidelines and specifications of the technology and assessment publishing industries. We also adhere to a variety of industry regulations and government legislation.
CCPA/CSPC Compliance
Our compliance with the California Consumer Privacy Act (CCPA) and California Student Privacy Certification (CSPC) demonstrates a commitment to protecting student and consumer personal information. Through the iKeepSafe Privacy Program, we maintain privacy expectations for MHS and authorized personnel who handle student data.
Access in Trust Center
COPPA
MHS adheres to the COPPA privacy principles, and MHS sites are not directed to children under 13 years of age. For more information regarding COPPA and online privacy, please see the COPPA website.
Criminal Justice Information Services (CJIS)
Our Criminal Justice Information Services (CJIS) compliance outlines how MHS protects criminal justice information (CJI). In alignment with the CJIS Security Policy (CJISSECPOL) and U.S. requirements for protecting CJI, we maintain secure operational processes for storing and handling sensitive information.
Access in Trust Center
Data Security and Protection Toolkit
Our Data Security and Protection Toolkit (DSPT) submission demonstrates alignment with NHS England’s expectations for organizations accessing NHS patient data and systems. Through an annual self-assessment against the National Data Guardian's 10 data security standards, we evaluate our practices for handling personal and health information.
Access in Trust Center
DCB0129 Mark of Trust
Our DCB0129 Mark of Trust demonstrates MHS’ commitment to clinical safety in digital health technology. In alignment with England’s clinical risk management standard, we maintain practices that support the safe use of digital health technologies within the United Kingdom healthcare system.
FERPA
Our FERPA certification demonstrates compliance with the Family Educational Rights and Privacy Act (FERPA) to protect student education records. Through the iKeepSafe Privacy Program, we maintain privacy expectations for MHS and authorized personnel who handle student data, helping support access rights and regulatory compliance.
Access in Trust Center
HIPAA Policy
Our HIPAA Policy outlines how MHS safeguards protected health information (PHI) transmitted through MHS services. In alignment with the Health Insurance Portability and Accountability Act (HIPAA), we establish requirements for accountability, permitted use, access, and breach notification while protecting proprietary materials and trade secrets.
Access in Trust Center
Integrated Accessibility Standards Policy
Our Integrated Accessibility Standards Policy outlines how MHS advances accessibility in compliance with Ontario accessibility requirements and international standards. We establish applicable standards and regulations for information, communications, employment, and service delivery to remove barriers to entry and advance remediation.
Access in Trust Center
ISO/IEC 27001:2022 Certificate
Our ISO/IEC 27001:2022 certification demonstrates compliance with the Information Security Management System (ISMS) requirements of ISO/IEC 27001:2022. Through MHS applications, we operate an ISMS that conforms to the international standard, supporting the security, confidentiality, and integrity of client data, its availability, and accountable risk management.
Access in Trust Center
PIPEDA Policy
Our PIPEDA Policy outlines how MHS protects collected, used, and disclosed personal information. In alignment with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), we establish expectations for accountability, consent, limited use, and responsible handling throughout the information life cycle.
Access in Trust Center
Service Organization Control 2 (SOC 2)
Our SOC 2 examination provides independent assurance to the ongoing protection and security of client data. Through a third-party audit based on the applicable Trust Services Criteria (TSC), we establish independent assurance over our security controls to support security and vendor due diligence reviews.
Access in Trust Center
SOPIPA Compliance
Our SOPIPA certification demonstrates compliance with the Student Online Personal Information Protection Act (SOPIPA) to protect the privacy of student information. Through the iKeepSafe Privacy Program, we maintain privacy expectations for MHS and authorized personnel who handle student data, helping safeguard privacy and uphold individual access rights.
Access in Trust Center
Texas Risk and Authorization Management Program Certification (MAC+)
Our Texas Risk and Authorization Management Program (TX-RAMP) certification meets the applicable Texas Department of Information Resources requirement for protecting sensitive data using the MHS Online Assessment Center+ (MAC+). We provide assurance regarding the security standards applied to cloud services used by Texas state agencies.
Access in Trust Center
Texas Risk and Authorization Management Program Certification (TAP)
Our Texas Risk and Authorization Management Program (TX-RAMP) certification meets the applicable Texas Department of Information Resources requirements for protecting sensitive data using the MHS Talent Assessment Portal (TAP). We provide assurance regarding the security standards applied to cloud services used by Texas state agencies.
Access in Trust Center
UK Cyber Essentials Certification
Our UK Cyber Essentials certification demonstrates compliance with the UK Cyber Essentials Scheme to proactively stand against common cyberattacks. We establish confidence in our cybersecurity practices and the protection of MHS systems and customer information.
Access in Trust Center