Skip to content
OnCoreTrust

Draft for internal review. Compliance statuses, documents, controls and subprocessors are placeholders until confirmed in src/content/trust.ts.

Resources

Reports and agreements

Select the documents your team needs and send one request. We review every request and reply by email, usually within two business days.

Compliance reports

  • SOC 2 Type II report

    Full auditor's report covering the most recent observation period.

  • SOC 2 bridge letter

    Covers the period between the last report and today.

  • HIPAA compliance summary

    How OnCore safeguards protected health information.

Security

  • Penetration test summary

    Executive summary of the latest third-party penetration test.

  • Security overview

    Architecture, encryption, access control and incident response at a glance.

Legal

  • Business Associate Agreement (BAA)

    OnCore's standard BAA for customers handling protected health information.

  • Data Processing Agreement (DPA)

    Standard terms for processing personal data under GDPR.