ISO 27001 vendors for Healthcare
Vendors that support ISO/IEC 27001 Information Security Management and explicitly serve healthcare customers. Each vendor’s last-checked date is shown in the table.
| Vendor | HQ | Founded | Size | Pricing | Last checked |
|---|---|---|---|---|---|
| Scrut Automation | Palo Alto, United States | 2021 | 51-200 | Contact for pricing | Sep 21, 2026 |
| Naaia | Louveciennes, France | 2021 | 11-50 | No public pricing tiers; demo and quote requested via website. | Sep 21, 2026 |
| PrivacyScrubber | United States | — | — | Contact for pricing | Sep 21, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Oct 15, 2026 |
| Harmonic Security | London, United Kingdom | 2023 | — | Three packages, Explore, Guide and Command (marked most popular), are listed on Harmonic's pricing page without prices; the page offers a demo. AWS Marketplace lists "Harmonic Security - Explore" at $163.00 per user per year on a 12-month contract, with a 200-user minimum and private offers for custom quotes. | Oct 15, 2026 |
| Nightfall AI | San Francisco, United States | 2018 | — | Two packages, priced per user per year: Foundation Edition (DLP across SaaS, email, AI apps and endpoints, with real-time blocking) and Premier Edition (adds AI agent security: hooks for Cursor, Claude Code and VS Code, MCP discovery, Claude Cowork and Claude Enterprise monitoring, SIEM export), offered as Tier 1 (up to 3 apps) or Tier 2 (all supported apps). The pricing page shows no amounts; it says final pricing depends on user count and data volume and offers a free 7-day proof of value. Each user license covers two endpoint devices. Data Discovery and Classification is an add-on with 150 GB included and paid 1 TB, 3 TB, 5 TB and 20 TB packs. | Oct 15, 2026 |
About ISO 27001
ISO/IEC 27001 is the international standard for information security management systems (ISMS). It complements ISO/IEC 42001 (AI management systems) and is often held by AI governance vendors as a baseline information-security certification. Required by many enterprise procurement processes globally.
Read framework guide →About Healthcare
Hospitals, payers, and digital health companies using AI for clinical decision support, imaging, coding, prior authorization, and patient engagement. Regulated by FDA SaMD, HIPAA, and HHS Section 1557 non-discrimination rules in addition to AI-specific laws.
See all healthcare vendors →