Odesso Trust Center
Trust Is Foundational to Everything We Build
Odesso is committed to protecting the confidentiality, integrity, and availability of the information entrusted to our technology. Our security and privacy commitments support the demanding operational and regulatory needs of healthcare organizations.
Our Security Commitments
The practices that protect what you entrust to us.
These commitments guide our approach to protecting information and supporting healthcare customers.
Information Security
Our commitment is to protect sensitive information through appropriate access controls, authentication safeguards, monitoring, and documented operational procedures.
Data Privacy & Healthcare Information
Our approach emphasizes confidentiality, appropriate access restrictions, secure processing, and contractual data protection obligations.
Infrastructure Security
We prioritize layered infrastructure safeguards, secure hosting, access management, monitoring, and resilience appropriate to each deployment.
Identity & Access Management
We prioritize defined authorization, role-appropriate permissions, authentication safeguards, and responsible management of the employee access lifecycle.
Secure Development & Change Management
Our commitment is to controlled change review, responsible deployment, and application security throughout the development lifecycle.
Security Governance & Incident Response
Our commitment includes clear security responsibilities, awareness, incident reporting, and a coordinated response to concerns.
Governance
Compliance, Assurance & Security Governance
Our security and privacy commitments focus on the areas most relevant to healthcare operations and procurement review.
Security review topics include the following areas.
Enterprise infrastructure. Defined responsibilities.
Our security approach combines the capabilities of enterprise cloud and application infrastructure with Odesso-managed policies, access decisions, and operational responsibilities. Specific controls depend on the service and agreed deployment architecture.
Shared responsibility, deliberately defined
Documentation Categories
What the Trust Center organizes
The following categories describe documentation that may be requested for security review. Availability and release are subject to individual approval.
Security & Compliance
Privacy & Data Protection
Infrastructure & Application Security
Business Continuity
Legal & Contractual
Documentation availability and release are subject to individual review.
Request Access
Request Trust Center Access
Tell us about your organization and what you need to review. Our team evaluates every request individually.
Confirmation
Request received
Thank you for your interest in Odesso's security and compliance program. Your request has been received and will be reviewed by our team. If approved, you will receive a separate invitation with instructions for accessing the Trust Center.
Note: This request does not grant access.
Return to Trust CenterResponsible Disclosure
Report a Security Concern
If you believe you have identified a security or privacy concern involving Odesso's services, please contact [email protected]. Do not email patient data or credentials.
Email [email protected]