CentralReach
Security and trust center evidence
ABA and Multidisciplinary Software Solutions for Autism & IDD
Summary
CentralReach has 1 registry-verified row and 2 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
CentralReach displays a HIPAA badge on its trust centre as of 30 Oct 2026, with BAA availability not yet captured in that claim. CentralReach states on its trust centre that it holds a SOC 2 Type II report, as of 30 Oct 2026. CentralReach is listed in the EU-US Data Privacy Framework registry as active, covering the UK Extension Certification, EU-US Certification, and Swiss-US Certification, as of 26 Oct 2026. That Data Privacy Framework listing shows an issue date of 6 Mar 2020 and is recorded as valid through 17 Feb 2027. Overall, CentralReach's evidence combines a vendor-stated HIPAA badge and SOC 2 claim with a registry-verified Data Privacy Framework status.
- HIPAA: vendor states a HIPAA badge on its trust centre as of 30 Oct 2026; BAA availability not yet captured
- SOC 2: vendor states it holds a SOC 2 Type II report on its trust centre, as of 30 Oct 2026
- EU-US Data Privacy Framework: listed in registry as active through 17 Feb 2027, as of 26 Oct 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 30 Oct 2026; it is regenerated whenever a row changes.
Among healthcare vendors
1verified rows
Category median 0, across 91 indexed healthcare vendors. CentralReach has more verified rows than 52 percent of them.
aba softwareautism careclinical documentationpractice management
Compare with similar vendors
Pick your own comparisonCompliance grid
HIPAAVendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 1 Nov 202621 sources
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 1 Nov 202621 sources
EU-US Data Privacy FrameworkVerifiedActive: UK Extension Certification, EU-US Certification, SW-US Certification
as of 26 Oct 20261 source
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 1 Nov 2026.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Healthcare category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Medeor
Healthcare
Streamline patient care with our advanced Patient Management System Software in
Athenahealth
Healthcare
Athenahealth, Inc. is a privately held American company that provides cloud-based SaaS healthcare technology and network-enabled services
Care GP
Healthcare
AI agents to run primary healthcare operations
Lumeon
Healthcare
Transform the patient experience and ensure that care teams always work at top-of-license with the leaders in care
Evidence against regulations
All regulations for CentralReachHow much of each regulation’s vendor requirements CentralReach’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read