Security Trust Center

At ConnectiveRx, we prioritize safeguarding our customers' sensitive information. To achieve this, we’ve implemented a robust security program aligned with well-recognized security and privacy practices and regulatory obligations. Independent third-party assessments are conducted annually, including PCI, SOC 2 (Type II for Security, Privacy, and Confidentiality), HIPAA, and SOC 1 (Type II), to provide customers with additional assurance regarding our security and control environment. The security program is supported through governance, risk management, and periodic management review.

ConnectiveRx also supports ongoing security awareness for employees and maintains processes for identifying, reporting, and addressing potential security concerns.

Our dedicated Information Security Team is organized into key areas for maximum effectiveness:

• Chief Information Security Officer (CISO): The CISO oversees the entire Information Security program, sets strategic direction, manages security investments, leads technical security functions, and informs the Executive Management Team of significant security and risk considerations.

• Security Architecture: This function includes Security Engineering, and Application Security (AppSec). This team is responsible for designing and implementing secure architecture patterns, embedding security controls into systems and development lifecycles, guiding secure software development practices, and partnering with engineering teams to proactively identify and mitigate security risks across infrastructure and applications.

• Sr. Director of Information Security GRC: This role leads the Governance, Risk, and Compliance (GRC) team. This team ensures our security policies and procedures are maintained and periodically reviewed, oversees governance and control assurance activities, manages third-party attestation audits, and oversees the Information Security Risk Management process including Third Party Risk.

• Manager of Information Security Operations: This role leads the Information Security Operations team. This team supports day-to-day security monitoring and operational security activities, coordinates response to security events, and helps maintain the organization’s security platforms and capabilities.

Through this structure, ConnectiveRx maintains a proactive and comprehensive approach to information security.