CIO Bulletin

ClearDATA: De-Risk the Healthcare Cloud with Automation

ClearDATA was conceived and designed from the ground up to serve the mission-critical system needs and regulatory requirements of healthcare organizations. Our founders drew upon their own experience, as well as that of the top engineers, systems architects, and visionaries from the healthcare IT and cloud computing industries, to create the most robust, secure, reliable, and HIPAA-compliant cloud computing solution in the industry.

As the market leader for healthcare cloud computing and information security services for providers, life sciences, payers, and healthcare technology organizations, ClearDATA solutions enable its customers to fully automate, protect, and securely manage healthcare applications, data, and IT infrastructure in the cloud.

Multi-Cloud Solutions

Gain visibility into your compliance status with ClearDATA Comply™, our multi-cloud compliance solution that meets HIPAA, GDPR, and other regulatory frameworks. Comply is available across the three major public clouds (AWS, Azure, and Google Cloud) and offers protection for your cloud environment with automation to configure and enforce services in a secure and compliant way, as well as automated remediation and near real-time reporting of your compliance status.

How ClearDATA Helps Healthcare Technology Companies

Whether your organization is cloud-native or beginning your journey to the cloud, you need to secure sensitive PHI/PII in a HITRUST certified environment that won’t impede your ability to harness advanced analytics and develop applications that respond to the demands of healthcare customers and differentiate you from the competition. ClearDATA provides native access to each of the public clouds — Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure — along with tools to safeguard your healthcare IT security and compliance posture.

Understand and Optimize your Healthcare Security and Compliance Posture

As healthcare adopts advanced technologies to improve patient health outcomes, security incidents and breaches continue to increase in number and in sophistication. Risks that might compromise sensitive data within an organization can arise from any number of directions—an unguarded workstation within an office, a misconfigured server or firewall, or even a disgruntled employee are among many of the ways an organization might experience exposure.

For this reason, organizations that handle protected health information (PHI) or have signed a Business Associate Agreement (BAA) with a Covered Entity must conduct a Security Risk Assessment (SRA) on an annual basis, per the HIPAA Security Rule. ClearDATA Assess® software can help you meet the SRA documentation requirement from HIPAA, as well as understand and address where security and compliance vulnerabilities lie within your organization in order to safeguard sensitive data.

Is ClearDATA compliance first or innovation first? Yes.

In healthcare, there is often a false dichotomy presented - a compliant, security-forward approach or a focus on innovation. But ClearDATA offers a different perspective – one in which both options are equally available and viable.

Let’s talk about how. At ClearDATA, our team of healthcare and cloud experts dig into your cloud strategies with an eye on security and compliance. Our cloud architects are certified across three major public clouds and are at the forefront of the changing landscape of healthcare, driving an evolution at the intersection of it and the cloud.

The company will integrate a tailored services model with hand-picked subject matter experts - all designed to support your strategic cloud journey. Our services encompass people, processes, and technology. ClearDATA will meet you where you are, in as efficient a manner as possible. This saves you work and accelerates your project development.

Easily Keep Track of Sensitive Information in the Public Cloud

Assembling your ePHI inventory is crucial to the evidence-gathering process involved in an SRA. This helps you and our risk assessment team document where sensitive information exists within your organization and determine the level of risk associated with it. Doing this on your own can be a time-consuming process and a heavy lift on resources, especially if you are starting from scratch. With Assess, all assets documented in the inventory will remain saved in the Assess portal so you can access it when you need to, whether for next year’s SRA or for auditing purposes. To learn more about the importance of keeping track of your ePHI in the public cloud.

Understand and Manage Security and Compliance Risks: Currently, SRA projects are largely a human-driven assessment of risk, the results of which are usually handed over in several documents. With ClearDATA Assess, you’ll be able to accomplish the following, all in one portal:

Review Risks Identified by SRA Team: A clear explanation of each identified risk, backed by ClearDATA’s understanding of the rule associated with the risk, will be included in the Risk Management Plan within the Assess portal.

Track Remediation of Identified Risks: Users can view each identified risk and ClearDATA’s recommendation for remediation within the Assess portal. An admin within the customer organization can assign tasks to stakeholders within the organization and track progress against remediation.

Prove Compliance to HIPAA Standards: An important requirement of the SRA is the ability to show that risks have been identified and a plan for remediation is actively underway. Your Risk Management Plan portal screens can be shared with auditors, should the need arise.

Efficiently Manage and Assess Permissions Sprawl

ClearDATA’s new Identity Access Management (IAM) visualization mapping capability provides a powerful and easily digestible solution to complex permissions management—offering intuitive visualization and analysis so your team can move quickly, implementing appropriate controls for your cloud ecosystem.

Dive in with a clear view of IAM across your cloud environment(s) through the critical security lens - only through the ClearDATA CyberHealth Platform. Now, the platform extends its automated security and compliance tooling, helping organizations manage and understand the scope of risk associated with permissions, gaining immediate insight into:

The individuals and roles with access to specific resources, which resources give permissions to whom, and which applications have access to those resources
Stale resources
Least privilege enforcement

Do users and roles have large amounts of permissions that aren’t being used? 
Do we have stale sensitive data?
Do I have sensitive data that isn’t being used and would be better off deleted? 
PHI-containing resources
Individuals granted access to PHI

Extend the Value of Sensitive Data, Without Compromising Compliance

Built using natural language processing (NLP) and machine learning technologies, ClearDATA Locate software is designed to help healthcare organizations and their partners harness sensitive data while maintaining privacy, security, and compliance.

With Locate, your team can mask, trace, and identify sensitive information (PHI) in the public cloud automatically, saving you time and giving you the peace of mind that your sensitive data is accounted for.

Customer Success

“We want to focus on what we do best, which is taking care of patients. What we should not be doing is recreating the wheel on our own when it comes to technology, security, and privacy. That’s where ClearDATA can help.”

– William H. Morris, Associate CIO, Cleveland Clinic

Darin Brannan: President, Chief Executive Officer and Co-Founder

A highly successful tech entrepreneur and prior venture capitalist, Darin is passionate about improving healthcare. Prior to joining ClearDATA, he founded Web.com, a leading Cloud Computing/SaaS provider. He raised $65M from top VC firms, grew the company to 700-plus employees and achieved a successful IPO, and recently valued at $2B.

Prior to Web.com, Darin founded Verio, which grew to $325 million in revenue, a successful IPO of $1.2B market value, and sold shortly thereafter for $5.5B cash to NTT Data. Darin also helped launch VIANet, an international version of Verio that was valued at $3.5B when it went public.

Darin honed his skills in building start-up companies while working as a venture capitalist at Norwest Venture Partners and Burr, Egan, Deleage & Co., where he sourced, invested, and helped guide a dozen start-ups that were successfully acquired or went public.

Darin holds a M.B.A. in International Studies from the University of Hartford and a B.S. in Business Administration and Aviation from Embry-Riddle Aeronautical University.