Compliance Roadmap
ALB Growth Agency has not obtained HIPAA compliance certification or SOC 2 certification. Neither is a status that a website can claim on its own — both require completed administrative, legal, and audit work in addition to technical controls. This page states where we actually stand.
The public marketing website does not process Protected Health Information (PHI) and is not subject to HIPAA. ALB Growth Agency’s consulting work in the Healthcare Transformation division is architected under a HIPAA-ready assumption — see the HIPAA Readiness Gap Analysis for the full list of outstanding administrative, legal, and technical requirements, including Business Associate Agreements, a completed security risk analysis, and designated Privacy and Security Officers.
SOC 2 readiness work has not yet begun in earnest. Controls listed on the Security Overview page are early, real implementations, not evidence collected for an audit. No SOC 2 report — Type I or Type II — has been requested or completed.