Security and Compliance

PMG has been certified by third-party auditors as being SOC 2 Type II compliant. This certification provides objective evidence that our systems and controls meet acceptable standards for both their design and their operating effectiveness.

SOC 2 (System and Organizational Controls) audits examine how well an organization meets the trust services criteria for security, availability, processing integrity, confidentiality, and privacy. PMG’s SOC 2 Type II compliance report offers our customers an additional level of confidence about the security of our software.

PMG is committed to protecting consumer credit card data in compliance with the Payment Card Industry Data Security Standard (PCI DSS). Our alignment with this standard is reflected in the people, technologies and processes we employ.

We conduct regular vulnerability scans and penetration tests in accordance with the PCI DSS requirements for our business model. We attest to our PCI compliance annually, and our most recent self-attestation was completed June 1, 2022.

PMG serves as a “business associate” to entities covered under HIPAA (The Health Insurance Portability and Accountability Act). By entering into such contracts with our customers, we affirm our commitment to safeguarding protected health information (PHI) and preventing unauthorized use or disclosure of individually identifiable health information.

PMG is compliant with the Security Rule contained within HIPAA regulations and meets the guidelines set forth for electronic protected health information (e-PHI).