FenixPyre Achieves SOC 2 Type II Attestation and HIPAA Compliance Certification

Demonstrates operational commitment to the highest levels of data security, privacy, and compliance.

New Albany, OH – November 08, 2024—FenixPyre, the leading data-centric security management platform for managing security at the file level across hybrid environments, announced today that it has achieved SOC 2 Type II attestation in accordance with the American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations, also known as SSAE 18. Achieving this standard with an unqualified opinion serves as third-party industry validation that FenixPyre provides enterprise-level security for customers’ data secured in the FenixPyre platform.

Additionally, FenixPyre has received HIPAA compliance certification, in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) regulation for the handling of protected health information (PHI) for data security and privacy.

The FenixPyre platform is revolutionary in how it fills the gaps in perimeter security architecture by bringing security down to the individual file level while at rest, in transit, and in use—all while being completely transparent to users. This provides automatic data security instead of reliance on an employee’s security process adherence. It also enables secure file sharing and collaboration, both internally and with third parties, without changes to existing workflows. FenixPyre’s patented approach to data-centric security makes ransomware attacks futile. Even if data is exfiltrated, FIPS 140-2 encryption renders the data as pure cipher text, and therefore unreadable and unusable to cybercriminals. The company’s solution is an ideal fit for ransomware-prone organizations and heavily regulated industries such as healthcare, financial services, legal services, or suppliers working with the DoD and requiring CMMC certification.

“Protecting our customers’ sensitive data has always been the backbone of our solutions,” said Tom Kwon, chief executive officer at FenixPyre. “Completing our SOC 2 Type II attestation is a significant milestone and reinforces our unwavering dedication to ensuring the highest level of processes and controls are in place and that our solutions are enterprise-ready.”

FenixPyre also received its HIPAA compliance designation for its inherent security measures and safeguards that protect PHI data. These capabilities ensure the secure handling of sensitive healthcare data between organizations and their partners.

“As a data-centric security company, security and privacy are always top of mind operationally,” stated Harihara Varma Indukuri, chief technology officer and co-founder of FenixPyre. “Ensuring that the capabilities and compliance of our solutions match our end-users and third-party partner requirements are key initiatives we continually address. Our inherent encryption at the file level ensures data is only accessible as authorized and always protected across its lifecycle.”

FenixPyre was audited by a security and compliance attestation leader for B2B, SAAS companies worldwide. Prescient Assurance is a registered public accounting firm in the US and Canada and provides risk management and assurance services, which include SOC 2, PCI, ISO, NIST, GDPR, CCPA, HIPAA, and CSA STAR. For more information about Prescient Assurance, please contact the company: info@prescientassurance.com.

An unqualified opinion on a SOC 2 Type II audit report demonstrates to FenixPyre’s current and future customers that they manage their data with the highest standard of security and compliance.

About FenixPyre

FenixPyre removes the complexities of data security management, ensuring continuous protection of sensitive data and collaboration without compromise. File-level encryption creates a self-protecting perimeter that follows the data—at rest, in transit, or in use. The FenixPyre platform embeds zero-trust, data-centric security into any file using a patented combination of military-grade FIPS-validated encryption and multifactor access controls. FenixPyre integrates effortlessly with existing workflows, eliminating user friction and easing compliance. Whether on-premises, in the cloud, or across multi-cloud environments, FenixPyre delivers comprehensive protection that helps meet regulatory mandates like CMMC, mitigates insider threats and ransomware, and supports data governance.