Freshpaint is a healthcare marketing performance and compliance platform that helps organizations use modern analytics and advertising while protecting patient privacy. We provide a first-party data layer, consent enforcement, and strong security controls, and we’re investing in SOC 2 and HITRUST r2 to validate and continually improve our security and privacy program.
Subprocessors
Trust Center Updates
HITRUST r2 Certification Effort
Freshpaint is actively working toward HITRUST r2 certification as part of our ongoing security and compliance program.
Vulnerability Management and Patching
Freshpaint maintains a vulnerability management program to help identify, assess, remediate, verify, and report technical vulnerabilities across company systems and devices. Vulnerabilities are prioritized, tracked through remediation workflows, and reviewed periodically as part of our broader security and compliance program.
Security Awareness and Training Program
Freshpaint maintains a security awareness and training program to help reinforce workforce responsibilities, reduce human-driven security risk, and support ongoing compliance requirements. Security awareness training is incorporated into onboarding and used for recurring awareness review where assigned.
Endpoint Security and Device Management Program
Freshpaint maintains a centralized endpoint security and device management program to help ensure company devices are enrolled, configured to security baselines, and monitored for threats as part of our broader security and compliance program.


