# Compliances (4)

Here are the compliance frameworks that Reflow follows which showcases our adherence to industry-standard security guidelines and practices.

## SOC 2 Type 2

Certified

A SOC 2 Type 2 report is an independent third-party attestation that evaluates both the design and operational effectiveness of an organization's internal controls over a specified period.

## HIPAA

Compliant

The Health Insurance Portability and Accountability Act, a U.S. law that mandates standards for protecting sensitive patient health information.

## CPRA (formerly CCPA)

Compliant

The California Consumer Privacy Act provides data privacy rights to California residents, allowing them control over how their personal information is collected and used.

## GDPR

Compliant

The General Data Protection Regulation, a comprehensive data protection law in the EU, governs how organizations must protect personal data and privacy.