Welcome to the Butterfly Trust Portal
Welcome! This portal provides a comprehensive overview of our security and compliance posture. At Butterfly, we are built on a foundation of verifiable trust, and we're committed to offering industry-leading security to give you peace of mind. We understand the critical importance of securing sensitive medical data in an ever-evolving digital landscape.
Here you can find details about our security framework, access key compliance reports, and understand the measures we take to protect your data.
Compliance & Certifications
Butterfly is designed to meet the highest standards of global security and compliance. We adhere to numerous global security standards and are continuously working to advance our certifications.
Current Compliance
- HIPAA
- GDPR Ready
- SOC 2 Type 2
- ISO 27001
- United States GovRAMP
- NHS England DPST
- German C5
- NIST 800-53 (Rev-5)
- IEC 81001-5-1
Technical Assessments
- MDS2
- HCVAT
- CAIQ
Pursuing Certification For 2026
- FedRAMP
- HITRUST
Additional Documents
- Penetration Test
- Voluntary Product Accessibility Template (VPAT)
- Written Information Security Plan (WISP)
- Security Brochure
- AI Model Cards
- Environment, Social and Corporate Governance (ESG)
How We Protect Your Data
We prioritize data security at every level, from our infrastructure to our organizational policies.
Data Protection & Encryption
✔ Data at Rest
✔ Data in Transit
✔ Secret Management
✔ Intrusion Detection
Product & Application Security
✔ Secure Software Development
✔ Vulnerability Scanning
✔ Web Application Firewall (WAF)
✔ Disaster Recovery
✔ Redundancy
Infrastructure & Network Security
✔ Hosting by AWS
✔ Segregated Environments
✔ System Hardening
Organizational Security
✔ Access Control
✔ Employee Security Training
✔ Background Checks
✔ Vendor Management
Reliability & Availability
- 99.9% Uptime: Click here for our current status, and sign up for alerts.
Legal & Privacy
Protecting your privacy and legal rights is fundamental to our operations.
- Privacy Policy: For detailed information on how we collect, use, and protect your personal data, please review our full Privacy Policy.
- Global Privacy: Up to date dataflow and compliance information can be found here.
- Terms of Service: You can find our terms of service here.