Alaffia Health is changing how healthcare organizations harness the power of artificial intelligence. Their platform enables providers to build and deploy AI models trained on real-world data, with privacy, security, and patient outcomes at the center of everything they do. From health systems to academic medical centers, Alaffia empowers healthcare leaders to apply machine learning while maintaining full control over their data.
But when working with sensitive healthcare data, trust is non-negotiable and for Alaffia, that meant going beyond innovation. It meant embedding security and compliance into the foundation of their platform.
“For us, security and compliance aren’t boxes to check. They’re critical to earning and keeping our customers’ trust, especially in healthcare,” shared Nathaniel Ruzicka, Alaffia’s Senior Information Security Engineer.
With that in mind, Alaffia set out to achieve SOC 2 as their first formal attestation. But their vision extended well beyond a single framework. They needed a partner that could scale with them and support increasingly complex requirements.
“Thoropass has been nothing short of a small miracle. They've made compliance something that helps us grow, instead of something that holds us back.”
Nathaniel Ruzicka, Senior Information Security Engineer, Alaffia Health
Alaffia’s journey with Thoropass began with SOC 2. But what started as a single framework quickly evolved into a comprehensive, long-term compliance strategy.
“We were initially focused on SOC 2, but Thoropass enabled us to get a head start on HITRUST i1, an entire year before we planned to begin,” Nathaniel explained. “That early mapping saved us time and eliminated duplicative work.”
With their previous vendor, pursuing more than one certification felt daunting. But with Thoropass, Alaffia expanded from one to three frameworks— SOC 2, HIPAA and HITRUST i1—in under a year.
“We wouldn’t be getting HITRUST i1 this year without Thoropass,” Nathaniel noted. “They’ve helped us do more, with less stress.”
Key to that acceleration was Thoropass’ integrated platform and dedicated support. The Customer Success Managers (CSMs) and audit team weren’t just responsive, they were deeply experienced. Nathaniel shared, “the CSMs were an unexpected value. They’re true experts. We could get answers from the audit team in half a day, instead of waiting weeks.”
Next year, the Alaffia team plans to grow their HITRUST program from i1 to r2, re-emphasizing their commitment to continued compliance. By consolidating vendors, streamlining evidence management, and embedding expert guidance into every step of the process, Thoropass has turned compliance into a driver of growth and trust.
