Security & Compliance

PCI DSS Certified

PCI DSS (Payment Card Industry Data Security Standard) is designed to protect credit card data. Our PCI compliance & platform is audited annually by a qualified third-party security assessor (QSA) to confirm that we handle payment information securely.

BookingTimes is certified at the highest level  - PCI DSS Service Provider Level 1 - validated through a full Report on Compliance (ROC). 

SOC 2 Type II Certified

SOC 2 (Service Organization Control 2) is a cybersecurity compliance framework that ensures customer data is stored and processed securely. Our compliance is audited annually by a third-party to make sure that our information systems are trustworthy, reliable and secure. 

BookingTimes is certified SOC 2 Type II compliant.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) applies to United States covered entities and business associates and is designed to protect sensitive patient health information. BookingTimes has implemented HIPAA Security and Rule requirements to protect health data processed through our platform.

Our HIPAA controls are continuously monitored in real-time by Drata, an automated compliance platform. If you'd like to discuss our HIPAA compliance in detail, please contact us.