# Source: https://www.aptible.com/docs/core-concepts/security-compliance/compliance-frameworks/hitrust.md

> ## Documentation Index
> Fetch the complete documentation index at: https://www.aptible.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# HITRUST

> Learn about achieving HITRUST compliance on Aptible

<Check>
  Compliance Fast-Track
</Check>

# Overview

Aptible’s story began with a focus on serving digital health companies. As a result, the Aptible platform was designed with high compliance in mind. It automates and enforces all the necessary infrastructure security and compliance controls, ensuring the safe storage and processing of PHI and more.

# Achieving HITRUST on Aptible

<Steps>
  <Step title="Provision a Dedicated Stack to run your resources">
    <Info>
      Dedicated Stacks are available on [Production and Enterprise plans](https://www.aptible.com/pricing).
    </Info>

    Dedicated Stacks live on isolated infrastructure and are designed to support deploying resources with higher requirements— such as HIPAA and HITRUST. Aptible automates and enforces majority of the necessary infrastructure security and compliance controls for HITRUST compliance. When you request your first dedicated stack, an Aptible team member will also reach out to coordinate the execution of a HIPAA Business Associate Agreement (BAA).
  </Step>

  <Step title="Review the Security & Compliance Dashboard and implement HITRUST required controls">
    <Frame>
            <img src="https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=808fec7d4bdbe090437f3de79c2e9d84" alt="" data-og-width="1312" width="1312" data-og-height="645" height="645" data-path="images/screenshot-ui.6e552b45.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?w=280&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=98222990b7b298db06819d861394b233 280w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?w=560&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=c472cd3b11210413d3f7cfd5a674b0e6 560w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?w=840&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=a4faa7ce0ab41cd983a448635e21a32f 840w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?w=1100&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=e322259925a417312fb26c56d15fe9b6 1100w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?w=1650&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=53175f739a22b10a2b0b2d859344a8dc 1650w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/screenshot-ui.6e552b45.png?w=2500&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=67875a8a778d9b4bda6079828d16ef39 2500w" />
    </Frame>

    The Security & Compliance Dashboard serves as a great resource for showing off compliance. When a Dedicated Stack is provisioned, most HITRUST controls will show as complete by default, the remaining controls will show as needing attention.

    <Accordion title="Understanding the HITRUST Readiness Score">
      The HITRUST Common Security Framework (CSF) Certification is a compliance framework based on ISO/IEC 27001. It integrates HIPAA, HITECH, and a variety of other state, local, and industry frameworks and best practices. Independent assessors award this certification when they find that an organization has achieved certain maturity levels in implementing the required HITRUST CSF controls.

      HITRUST CSF is unique because it allows customers to inherit security controls from the infrastructure they host their resources on if the infrastructure provider is also HITRUST CSF certified, enabling you to save time and resources when you begin your certification process. Aptible is HITRUST certified, meaning you can fully inherit up to 30% of security controls implemented and managed by Aptible and partially inherit up to 50% of security controls.

      The Aptible Security & Compliance Dashboard provides a HITRUST readiness score based on controls required for meeting the standards of HITRUST CSF regulation. The HITRUST score tells you what percentage of infrastructure controls you have successfully implemented to meet relevant HITRUST guidelines.
    </Accordion>
  </Step>

  <Step title="Request HITRUST Inhertiance from Aptible">
    Aptible is HITRUST CSF Certified. If you are pursuing your own HITRUST CSF Certification, you may request that Aptible assessment scores be incorporated into your own assessment. This process is referred to as HITRUST Inheritance.

    While it varies per customer, approximately 30%-40% of controls can be fully inherited, and about 20%-30% of controls can be partially inherited.

    <Card title="How to request HITRUST Inhertiance from Aptible" icon="book-open-reader" iconType="duotone" href="https://www.aptible.com/docs/how-to-guides/platform-guides/navigate-hitrust#how-to-request-hitrust-inhertiance" />
  </Step>

  <Step title="Show off your compliance" icon="party-horn">
    Use the Security & Compliance Dashboard to prove your compliance and show off with a `Secured by Aptible` badge

    <Frame>
            <img src="https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=26740493ff6e5eac6433306e801f2117" alt="" data-og-width="354" width="354" data-og-height="96" height="96" data-path="images/secured_by_aptible_hitrust.png" data-optimize="true" data-opv="3" srcset="https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?w=280&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=d3c39b8fb3f2123c342256fd387d210a 280w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?w=560&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=305ce0cd7001013962fb10ab6e3ca72e 560w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?w=840&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=4cfa3c12594397a3ca5c10c3936dd1e5 840w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?w=1100&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=1339f7249785593de8bf3963ce43b261 1100w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?w=1650&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=e3426ee512394b12c7735b23ac224eaa 1650w, https://mintcdn.com/aptible/RWSo_H5DBAoWcXSD/images/secured_by_aptible_hitrust.png?w=2500&fit=max&auto=format&n=RWSo_H5DBAoWcXSD&q=85&s=86b2a3754a0cce9bbde49291b09f2346 2500w" />
    </Frame>
  </Step>
</Steps>

## Related Resources

* [HITRUST Shared Responsibility Matrix](https://hitrustalliance.net/shared-responsibility-matrices) - To see Aptible's shared responsibility matrix
* [Aptible's Trust Center](https://trust.aptible.com/) - To see Aptible's HITRUST certification, reports, and assessment