Kalderos Trust Center

generated: '2026-07-19'
method: searched
probe: false
source: https://www.kalderos.com/company/security
url: https://www.kalderos.com/company/security
description: >-
  Kalderos publishes its security and compliance posture on its company security page
  (www.kalderos.com/company/security) rather than a dedicated trust.<domain> subdomain,
  so the automated trust-center probe did not record it. This is the searched,
  human-verified capture. The Truzo platform is described as built to SOC 1 and SOC 2
  standards and to the guidance of ISO 27001 and NIST SP 800-53. A public SOC 3 report
  is available for download; SOC 1 and SOC 2 reports are provided on request via the
  contact form. HIPAA compliance is documented alongside a published HIPAA FAQ for data
  associated with the 340B Drug Pricing Program.
certifications:
  - {name: SOC 1, type: Type report, availability: on request}
  - {name: SOC 2, type: Type report, availability: on request}
  - {name: SOC 3, availability: public report (downloadable)}
  - {name: ISO 27001, note: Platform built following ISO 27001 framework guidance.}
  - {name: NIST SP 800-53, note: Security controls aligned to NIST 800-53 guidance.}
  - {name: HIPAA, note: HIPAA compliant; published HIPAA FAQ for 340B-associated data.}
report_access:
  soc3: Public SOC 3 report available for download from the security page.
  soc1_soc2: Provided upon request via the company contact form.
docs:
  - https://www.kalderos.com/company/security
evidence:
  - {source: https://www.kalderos.com/company/security, keywords: [soc 1, soc 2, iso 27001, nist 800-53, hipaa]}