SOC providers for HIPAA requirements
Assess the service’s handling of health information and its fit with your clinical operations and incident process.
3 providers
Browse all providers
Blackpoint's CompassOne MDR investigates endpoint and cloud threats, isolating devices or disabling accounts within agreed response authority.
You still own Deployment, response policies, remediation, recovery and MSP client communication
Microsoft analysts investigate Defender incidents and execute permitted containment in MDR Plan 1.
You still own Defender licensing, deployment, access, exclusions and out-of-scope remediation
Adlumin MDR by N-able investigates and contains threats through a shared XDR and SIEM platform. Your team maintains controls and handles work outside the package.
You still own Connected tools, response permissions, escalation rules and work outside the package
About this list
Define whether logs, alerts or investigation records may contain health information. Review the exact service’s access controls, data locations, retention and agreement terms.
Confirm any required Business Associate Agreement with your privacy or compliance team. Document who can contain clinical systems and who makes patient-care, recovery and notification decisions.