
Healthcare Outsourcing Vendors: A HIPAA and SOC 2 Due Diligence Checklist
What HIPAA actually requires when a vendor handles patient data, what a SOC 2 report does and does not prove, and the questions to ask any healthcare BPO before it touches PHI.
6 min read







