Protecting Every Interaction. Securing Every Outcome.

Core Solutions is committed to protecting the privacy and security of the organizations we serve and the individuals in their care. Through rigorous compliance practices, robust application and infrastructure safeguards, and disciplined data-handling processes, we continually invest in industry standard best practices, frameworks, technologies, and controls necessary to keep sensitive information secure and under your control at all times.

Compliance and Frameworks

Core complies with applicable regulatory and industry standards that govern the responsible management of protected health information and personally identifiable information. From ONC-ATCB certification to alignment to the NIST 800-53 framework, our compliance program is designed to ensure that our platform meets the rigorous expectations for integrity and accountability across clinical, administrative, and financial workflows.

Application and Infrastructure Security

Our EHR platform is built on a secure, scalable architecture designed to protect information at every layer. Hosted on AWS and reinforced with enterprise-grade authentication, Role-based access controls (RBAC), and continuous monitoring, our application and infrastructure safeguards help ensure resilient performance and secure operations for organizations of all sizes.

Data Handling and Protection

We follow stringent processes to protect data throughout its lifecycle — from secure collection and controlled access to encrypted transmission and storage. Our role-based access controls, automated privacy policies, and consent-driven sharing help ensure that sensitive information remains compliant and is only accessible to individuals with appropriate authorization.

Key Controls That Strengthen Every Layer of Protection

Our security program is grounded in proven frameworks, certified capabilities, and rigorously enforced technical safeguards. Together, these controls protect sensitive information, support regulatory compliance, and help ensure the reliability that today’s behavioral health and IDD organizations require.

NIST 800-53 Compliance

Our platform aligns with the NIST 800-53 framework, providing federally recognized safeguards for system security, data protection, and risk management.

ONC-ATCB Certified EHR

As a complete ONC-ATCB Certified EHR, our system meets national standards for clinical, administrative, and financial functionality across behavioral health workflows.

Multi-Factor Authentication & SSO

All users authenticate using multi-factor authentication (MFA), and organizations can streamline secure access using OAUTH2-based single sign-on (SSO).

Encryption In Transit & At Rest

Information is encrypted end-to-end — SSL/TLS protects data in transit between users and the platform, while storage and database(s) hosted on Amazon Web Services (AWS) are encrypted to safeguard data at rest.

HIPAA and Role-Based Access Control

Detailed role-based permissions and automated privacy rules restrict access to only the information each user is authorized to view, supporting strong alignment with HIPAA requirements.

Consent Management and Audit Trails

Electronic consent management and comprehensive audit logs help ensure that data sharing adheres to required authorizations and that all access and activity remain fully traceable.