SOC 2 vendors for Healthcare
Vendors that support SOC 2 (Service Organization Control 2) and explicitly serve healthcare customers. Each vendor’s last-checked date is shown in the table.
| Vendor | HQ | Founded | Size | Pricing | Last checked |
|---|---|---|---|---|---|
| WhyLabs | Seattle, United States | 2019 | 11-50 | Free tier for 1 model; $100/month for 2 models, scaling per model up to enterprise at $8,333/month (AWS Marketplace listing). | Oct 1, 2026 |
| Scrut Automation | Palo Alto, United States | 2021 | 51-200 | Contact for pricing | Sep 21, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Oct 15, 2026 |
| Harmonic Security | London, United Kingdom | 2023 | — | Three packages, Explore, Guide and Command (marked most popular), are listed on Harmonic's pricing page without prices; the page offers a demo. AWS Marketplace lists "Harmonic Security - Explore" at $163.00 per user per year on a 12-month contract, with a 200-user minimum and private offers for custom quotes. | Oct 15, 2026 |
| Nightfall AI | San Francisco, United States | 2018 | — | Two packages, priced per user per year: Foundation Edition (DLP across SaaS, email, AI apps and endpoints, with real-time blocking) and Premier Edition (adds AI agent security: hooks for Cursor, Claude Code and VS Code, MCP discovery, Claude Cowork and Claude Enterprise monitoring, SIEM export), offered as Tier 1 (up to 3 apps) or Tier 2 (all supported apps). The pricing page shows no amounts; it says final pricing depends on user count and data volume and offers a free 7-day proof of value. Each user license covers two endpoint devices. Data Discovery and Classification is an add-on with 150 GB included and paid 1 TB, 3 TB, 5 TB and 20 TB packs. | Oct 15, 2026 |
| Fiddler AI | Palo Alto, United States | 2018 | — | Three plans: Free (real-time guardrails for hallucinations, toxicity, PII/PHI, prompt injection and jailbreaks, powered by Fiddler's Centor models); Developer at $0.002 per trace (adds unified observability with tests and experiments for agentic and predictive systems, custom evaluators and bring-your-own judge, role-based access control and SSO; SaaS only); and Enterprise, priced by sales (adds enterprise-grade guardrails and scale, SaaS, VPC or on-premises deployment, and a named customer success manager). The pricing page lists no trace or user limits. | Oct 15, 2026 |
| Credo AI | Palo Alto, United States | 2020 | 51-200 | Contact sales for enterprise subscription quote. | Sep 21, 2026 |
| Arthur | New York, United States | 2019 | 51-200 | Free tier available; Premium at $60/mo; Enterprise custom, contact sales. | Sep 21, 2026 |
| Lasso Security | Tel Aviv, Israel | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Sep 21, 2026 |
| PrivacyScrubber | United States | — | — | Contact for pricing | Sep 21, 2026 |
| Meilynx | United States | — | — | Contact for pricing | Sep 21, 2026 |
About SOC 2
SOC 2 is an AICPA auditing standard for service organizations, evaluating controls relevant to security, availability, processing integrity, confidentiality, and privacy. While not AI-specific, SOC 2 Type II reports are table stakes for B2B SaaS vendors — including AI governance platforms — and are frequently mapped to AI-specific risk frameworks.
Read framework guide →About Healthcare
Hospitals, payers, and digital health companies using AI for clinical decision support, imaging, coding, prior authorization, and patient engagement. Regulated by FDA SaMD, HIPAA, and HHS Section 1557 non-discrimination rules in addition to AI-specific laws.
See all healthcare vendors →