Raising the Standard for Healthcare Security with HITRUST i1 Certification

By Jen Spencer, MBA, MS, FIP, VP Privacy Compliance, NRC Health 

As healthcare becomes increasingly digital and interconnected, trust has never been more important, or more challenging, to maintain. Every day, hospitals, health systems, and partners rely on NRC Health to collect, store, enrich, and analyze sensitive data that supports meaningful Human Understanding. Protecting that data is a responsibility we take seriously. 

As part of our ongoing commitment to strengthening security and trust, NRC Health attained a HITRUST i1 certification. This milestone reflects the rigorous, independently validated standards that guide our work, and reinforces the foundation we continue to build for secure healthcare innovation.

Earning the HITRUST i1 certification goes well beyond checking a compliance box. It reinforces the trust our partners place in us every day. 

The i1 certification validates that we have strong cybersecurity controls in place, and that they are independently assessed and continuously maintained. For health systems navigating rising cyber threats, this provides confidence that the sensitive data they entrust to us is protected through a mature, well‑governed security program. 

Ultimately, this certification signals that when customers partner with NRC Health, they are partnering with an organization deeply committed to safeguarding their data, their mission, and the people they serve. 

How HITRUST i1 Supports Our Strategy 

We pursued the HITRUST i1 certification to establish a validated, industry-recognized foundation for our security and privacy program. HITRUST provides a comprehensive, scalable framework of essential cybersecurity controls, controls that are mapped to standards healthcare organizations already know and trust. 

Within our broader strategy, the i1 certification is a cornerstone. It strengthens our governance, risk, and compliance capabilities, supports secure innovation, and reinforces our commitment to protecting our brand, our partners, and the communities they serve. This foundation enables us to build solutions with the highest security standards while continuing to advance toward more mature certifications and frameworks. 

Trust is central to everything we deliver, and HITRUST helps ensure that trust is always grounded in rigor and accountability. 

One of the things I value most about this accomplishment is that it was truly a cross‑functional effort. 

While the security organization drives the program, our IT, engineering, and operational teams are essential partners. Achieving HITRUST certification requires alignment across the organization to ensure controls are designed effectively, implemented consistently, and operating continuously. 

In my view, success came down to three key pillars:

1. People.Talented, collaborativeteams who understand that security is everyone’s responsibility. 
2. Process.Disciplined, repeatable, and well‑documented practices that promote reliability and resilience.
3. Technology.Strong technical controls that ensure the protection, monitoring, and governance of data across our platforms.

I’m incredibly proud of the collective effort that brought this certification to life. It’s a testament to the culture of accountability and excellence we’re intentionally building at NRC Health.

As AI becomes increasingly embedded in healthcare, and as NRC Health continues to lead in responsible, domain‑specific AI development, the importance of strong foundational security cannot be overstated. 

HITRUST i1 certification reinforces that our security controls are implemented, tested, and aligned to a recognized industry standard. This is especially critical for AI systems, which rely on sensitive data and demand a high level of governance, oversight, and risk management. 

For our partners, the certification provides assurance that our AI‑enabled solutions, including our healthcare‑specific large language model Huey, operate within secure, well‑controlled environments. It confirms our commitment to innovation that does not compromise security, and to safeguarding the data that fuels deeply meaningful insights for healthcare organizations. 

Innovation and protection must evolve together, and HITRUST i1 strengthens that balance. 

What This Achievement Signals About NRC Health’s Future 

From a leadership perspective, this certification signals the direction we are intentionally moving as an organization. 

It demonstrates: 

• Our commitment to responsible innovation 
• Our investment in security, privacy, and risk management 
• Our belief that trust is foundational to Human Understanding 
• Our readiness to meet the needs of a rapidly evolving healthcare landscape 

It also reflects the strong leadership support that has been essential to driving prioritization, alignment, and sustained investment in the people, processes, and technology that will guide NRC Health into the next chapter of digital transformation. 

As AI, consumer expectations, and cyber threats continue to shape the future of healthcare, we remain committed to building solutions that are secure, ethical, and deeply human‑centered. 

Our HITRUST i1 certification is an important milestone, but it is not the finish line. It is the next step in our ongoing commitment to strengthening resilience, improving governance, and ensuring that trust remains at the heart of every experience we enable. 

To our customers: thank you for your trust. We remain committed to protecting your data, your mission, and the communities you serve. 

To our teams: thank you for your dedication, your expertise, and your belief in what we are building together. 

We will continue to invest, evolve, and lead—because responsible, secure innovation is essential to a more human, connected, and compassionate healthcare future.