Compliance

Statement of Policy on Ethical Practices

Machinify, Inc. and its subsidiaries (“Machinify”) maintain the highest level of professional and ethical standards in the conduct of its business. We place the highest importance on our reputation for honesty, integrity, and high ethical standards. This Policy reaffirms the importance of maintaining the highest level of ethical conduct and standards. These standards are achieved and sustained only through the actions and conduct of all Machinify staff. Every staff member, including management staff, across all business lines, is obligated to conduct themselves in a manner to ensure the maintenance of these standards.

Compliance Communication

Machinify provides multiple channels for compliance reporting and communication. Anonymous reporting is permitted. Matters reported through established channels that suggest violations of the Code, business policies, or any law will be promptly documented and investigated. The Compliance Office is responsible for maintaining a log of all reports, including the nature of any investigation and its results. Any such reports shall be maintained in a fashion that protects the attorney-client privilege, work product privilege, professional review privilege, or any other legal protection that applies.

HIPAA

Machinify serves as a Business Associate to healthcare payers and other covered entities. We are committed to safeguarding protected health information and demonstrate our commitment to compliance with all required security regulations under the Health Insurance Portability and Accountability Act (“HIPAA”) and The Health Information Technology for Economic and Clinical Health (“HITECH”) Act. All information and data transmitted securely to Machinify from our customers is protected in a secure and confidential environment. We safeguard all protected health information from misuse and will not use or disclose protected health information (“PHI”) other than as permitted or required by the Business Associate Agreement or as required by law.

Security and Compliance Certifications

Machinify maintains comprehensive security and compliance programs:

Machinify, Inc. and its subsidiaries are HITRUST r2 and/or SOC 2 Type 2 compliant, demonstrating our commitment to the highest standards of information security in healthcare. Through these certifications, we independently validate our security, availability, processing integrity, confidentiality, and privacy controls.

As we continue to integrate our subsidiaries, we are working toward unified compliance standards that meet or exceed the requirements of applicable regulations and industry standards.