Premise Health Achieves HITRUST Certification, Affirms Commitment to Protecting Sensitive Information


Premise Health, a leading employer-sponsored health center and wellness provider, today announced its NG2 application has earned Certified status for information security by HITRUST. With the HITRUST CSF Certified Status, Premise Health’s NG2 application meets key healthcare regulations and requirements for protecting and securing sensitive private healthcare information.

HITRUST CSF Certified status for the NG2 application indicates that the organization’s Electronic Health Record system has met industry-defined requirements and is appropriately managing risk, and places Premise Health in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST CSF helps organizations address these challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

“Today’s changing healthcare environment has put compliance and patient privacy at the forefront of providers’ strategic priorities,” said Stu Clark, CEO, Premise Health. “Achieving the HITRUST CSF Certification has always been a key focus for our organization and was only possible due to years of building the right infrastructure for our patients, providers and clients. This prestigious distinction, rare for this industry, reflects our level of dedication to protecting patient privacy amid our broader commitment to doing whatever it takes to help people get, stay and be well.”

Based in Brentwood, Tennessee, Premise Health manages nearly 600 employer-sponsored health and wellness centers across the country. It serves more than 250 of the nation’s leading employers, including a significant number of Fortune 1000 companies.

“The HITRUST CSF has become the information protection framework for the healthcare industry, and the CSF Assurance program is bringing a new level of effectiveness and efficiency to third-party assurance,” said Ken Vander Wal, Chief Compliance Officer, HITRUST. “The CSF Certification is now the benchmark that organizations required to safeguard PHI are measured against with regards to information protection.”

Premise Health has invested significantly in developing new employer-sponsored health solutions over the past three years. The company is actively engaged in a number of initiatives focused on expanding its direct primary care platform to include population health, virtual care, and community integration.

“Operating in the worksite health and patient engagement space, Premise Health faces a unique set of challenges in meeting ever-changing healthcare regulations across an expansive and diverse network,” said Joey Johnson, Chief Information Security Officer, Premise Health. “We are extremely pleased that achieving HITRUST CSF Certified Status sends a signal to all of our clients and partners that we take their privacy and security seriously. I’m grateful for the visionary leadership within our organization who understand that proper management of patient information and data is crucial to long-term success.”