We published Fluent's Trust Center to provide security and compliance reviewers with centralized access to our practices, controls, subprocessor information, and policy documents. The Trust Center includes an overview of security controls, a public subprocessor list, FAQ, and downloadable policy documents.
Published a comprehensive subprocessor list with details including purpose, PHI access scope, and operating regions. This list is publicly available at /trust/subprocessors and will be updated with at least 30 days' notice before new subprocessors are added.
Published a Security Incident Response Exhibit as part of our legal documentation. This exhibit details severity classification, escalation procedures, notification timelines, and post-incident review processes. Available as part of our legal documentation.
Updated the Privacy Policy to clarify data collection practices, third-party data sharing, and data-subject rights. The updated policy is available at /legal/privacy.
Implemented additional infrastructure hardening measures including enhanced network segmentation, updated firewall rules, and improved monitoring coverage. These changes strengthen our security posture without impacting service availability.
Updated the Business Associate Agreement (BAA) and HIPAA-related documentation to reflect current practices. The updated BAA is available at /legal/baa.