Array Behavioral Care is a technology-enabled behavioral health provider. To work with payors, build partner trust, and support continued growth, the company needed to earn HITRUST certification and demonstrate a mature security posture.
When Perry Wilson, Director of Information Security at Array Behavioral Care, began looking for support, the company did not have prior HITRUST assessments or a mature set of existing policies to build from. The team needed more than a tool. They needed audit expertise, practical guidance, and a partner who could help them understand what HITRUST required.
Array chose Thoropass because the team offered validated HITRUST assessment experience, practical support, and clear guidance through the requirements. From the beginning, Thoropass helped Array interpret HITRUST requirements, build documentation, prepare evidence, and stay focused on the right priorities.
“From the audit perspective, Thoropass has become an extension of my team.”
Perry Wilson, Director, Information Security, Array Behavioral Care
Thoropass’ auditors and customer support team guided Array through each step of the process. That combination of audit expertise and structured support helped the team maintain momentum while building the policies and evidence needed for the assessment.
With Thoropass, Array went from zero documentation to a completed HITRUST attestation in eight months. The team credited the outcome to structured guidance, embedded support, and a process that helped them move quickly without sacrificing quality.
The benefits carried into year two. Instead of rebuilding documentation or re-collecting evidence, Array was able to review policies, confirm security training completion, and move forward with far less manual preparation. The team estimated that it saved at least three months of hands-on work compared with the previous year.
“There will always be benefits to having an automation platform, but having a strong audit partner, like the one we found with Thoropass, is invaluable.”
Perry Wilson, Director of Information Security, Array Behavioral Care
Looking ahead: Compliance as a business strength
With HITRUST in place, Array can demonstrate trustworthiness to partners, support sales conversations, and reduce the internal burden of maintaining compliance. Thoropass continues to support Array with audit guidance as the company’s regulatory and business needs evolve.
