The credentials behind the work.

Security and compliance are where our work starts. Here is what stands behind them, stated with its source and its date.

247

HITRUST requirements you can inherit from us.

33 are fully inheritable and 214 are partially inheritable, under HITRUST Shared Responsibility Matrix 1.5.5, from our 2026 v11.7 assessment. Every inherited requirement is one your team doesn't have to implement and evidence alone.

Customers hosted on AWS may also rely on Cloudticity for infrastructure and facilities requirements. Customers on Microsoft Azure and Google Cloud cover those themselves.

Estimate what HITRUST will cost you

Certifications and reports.

HITRUST r2 Certified

HITRUST

Certified since 2017

Cloudticity completed the 2026 HITRUST r2 v11.7 assessment. The scope of that assessment is the Cloudticity Oxygen™ platform.

AICPA SOC for Service Organizations

SOC 2

Type II report

Our SOC 2 Type II report covers the Security criteria. We share the report under a non-disclosure agreement.

HIPAA

Frameworks

More than 130 mapped

Oxygen maps security events to more than 130 compliance frameworks and benchmarks, including NIST 800-53. The count is as of November 2026 and includes versions and levels of the same framework.

We helped write the rules we follow

Cloudticity has served on HITRUST's Shared Responsibility, Inheritance, Shared Responsibility Matrix, and AI working groups. Our founder, Gerry Miller, served on the HITRUST AI Working Group in 2024, which defined HITRUST's AI controls.

Help with your own reviews

We help complete the security questionnaires your customers and prospects send you, and we meet with them when it helps you win the deal.

Cloud provider designations.

AWS Partner, Premier Tier Services Microsoft Solutions Partner, Infrastructure, Azure Google Cloud Partner
  • AWS Premier Tier Services PartnerOur AWS partner tier.
  • AWS Healthcare CompetencyAnd the AWS DevOps Competency.
  • AWS Migration Acceleration ProgramEligible partner, which is how we help customers pursue AWS funding for migrations.
  • Public sector on AWSIncluding Authority to Operate on AWS, for federal and AWS GovCloud work.
  • Three cloudsWe run healthcare systems on AWS, Microsoft Azure, and Google Cloud.

Certifications our engineers hold.

Our team holds these certifications across AWS, Microsoft Azure, Google Cloud, and security, as of November 2026.

AWS Solutions Architect, Professional
AWS DevOps Engineer, Professional
AWS Generative AI Developer, Professional
AWS Security, Specialty
AWS Machine Learning, Specialty
AWS Solutions Architect, Associate
AWS SysOps Administrator, Associate
AWS Developer, Associate
AWS Data Engineer, Associate
AWS Cloud Practitioner
AWS AI Business Strategist
Azure Solutions Architect Expert
Azure DevOps Engineer Expert
Azure Administrator Associate
Azure Developer Associate
Azure Fundamentals
Microsoft 365 Fundamentals
Google Cloud Professional Cloud Architect
Google Cloud Associate Cloud Engineer
CrowdStrike Certified Falcon Administrator
CompTIA Security+
CompTIA Network+
CompTIA A+
LPI Linux Essentials
Project Management Professional (PMP)

Team members also hold ITIL certification.

Recognition.

46 awards and rankings since 2017.

Channel Partners MSP 501, 2025 winnerCRN MSP 500, 2025TITAN Business Awards, Gold winner, 2025Built In Best Places to Work, 2024Stevie Awards, Bronze winner, 2020 American Business AwardsInc. 5000Inc. Best Workplaces, 2020SIIA CODiE finalist, 2021

2026

2025

2024

2023

2020

2019

  • Inc. 5000 Inc.
  • Best Workplaces Inc.
  • Tech Elite 250 CRN
  • Next-Gen 250 CRN
  • Top 100 Vertical Market MSPs ChannelE2E

2018

  • MSP 500, Security 100 CRN
  • Tech Elite Solution Providers CRN
  • Next-Gen 250 CRN

2017

  • Next-Gen 250 CRN

Start here

Find out where you are on the Cloud Value Journey.

Take the two-minute assessment on your own, or have one conversation with a Cloud Value Architect. Either way you leave with your stage and the next step.