As digital health becomes more embedded in care delivery, the responsibility to safeguard patient data has never been greater. Cyber threats are rising, regulatory expectations are evolving, and patients are more aware than ever of how their data is being used and protected.
As the only diabetes management company with multiple industry-leading security certifications, data privacy and security are built into the core of how Glooko operates, innovates, and scales. We continue to invest in achieving and maintaining a number of rigorous global security standards and certifications, reinforcing our commitment to safeguarding patient health data.
We recently achieved key certifications for the Glooko outpatient diabetes management platform:
- ISO 27001: This globally recognized information security management standard outlines requirements for an information security management system (ISMS). Achieving this certification means an organization has a systematic approach to managing sensitive company and customer information. This recertification has been achieved for Glooko in the U.S.
- SOC 3: This internationally recognized global reporting standard, validated by a nationally recognized U.S. auditing firm, verifies that Glooko’s controls across its employees, systems, and processes fully secure all customer data, software, and company assets. This recertification has again been achieved globally for Glooko.
- HITRUST Risk-based, 2-year (r2): Achieving this healthcare industry gold standard confirms our stringent, independently-audited security controls meet the highest requirements of frameworks like HIPAA and NIST. This places our company in an elite group dedicated to protecting sensitive patient health data. This achieved certification now combines existing HITRUST r2 certifications for Glooko globally into one consolidated certification.
These certifications reflect the reliable protection of sensitive patient health data and confidence for healthcare providers and people with diabetes who rely on our diabetes management platform every day around the world. Our comprehensive security approach includes a number of additional certifications and hundreds of controls that ensure patient data remains secure at Glooko.
As the industry continues to advance, one thing remains constant: innovation only matters if it’s trusted. Trust is built through transparency, discipline, and doing the right thing with data. That’s the standard we’re committed to — and one we’ll continue to raise.