Hosted clients benefit from a secure, Medicat-owned private cloud infrastructure housed within a TierPoint Type 2 SOC 2 and SOC 3 facility, which is certified at a Tier III Standard by the Uptime Institute and located in Research Triangle Park, North Carolina.
Medicat’s private cloud infrastructure is designed to a Fault Tolerant, High Availability 2N standard. At the Research Triangle Park facility, there are two independent, fully duplicated, Medicat data centers, each with N+1 Fault Tolerant, solid state hardware enabling stateful (real time) internal failover of all SAN and network components.
Disaster Recovery with Minimal Down Time
Medicat has also taken geographic redundancy to the next level with a pre-built Warm Standby disaster recovery site at a comparable TierPoint facility in Chicago, Illinois. This facility, also designed to a 2N standard, asynchronously replicates and archives client data from the Research Triangle Park facility.
Should a catastrophic, non-recoverable event disable the TierPoint facility in Research Triangle Park (e.g., direct hit by a large tornado), Medicat would bring up the Warm Standby site in Chicago, and users could resume their work with only a brief interruption. In this case, Medicat has a Recovery Time Objective (time to resume use of the system) of 3 hours or less and a Recovery Point Objective (time over which data would be lost) of less than 1 hour.
College Health EHR with Type 2 SOC 2
To ensure storage, handling, and protection of clients’ electronic Patient Health Information (ePHI) meets and exceeds all government and industry standards, Medicat has made significant investments in its infrastructure and security framework. To substantiate that investment, Medicat has gone through the same third-party audit process as leading data centers in the country and has received Type 1 SOC 2 and Type 2 SOC 2 Examinations.
A company that has performed Type 2 SOC 2 Examination has proven its system is designed to keep clients’ sensitive data secure over time. When it comes to the cloud and related IT services, such performance and reliability are essential and required more often by regulators, examiners, and auditors.
