Health Catalyst Achieves HITRUST r2 Certification, Demonstrating the Highest Level of Information Protection Assurance

Rhea-AI Summary

Health Catalyst (Nasdaq: HCAT) announced that three products—Twistle, Lumeon, and Upfront—have earned HITRUST r2 certification for information security, signaling compliance with demanding regulatory and industry requirements.

Twistle was certified in September 2025, Lumeon in June 2025, and Upfront’s Emerald solution earned r2 in December 2024 with Upfront’s Ruby achieving HITRUST e1 in August 2025. The company says these certifications reinforce its data protection and compliance commitments.

Positive

• Twistle achieved HITRUST r2 certification in September 2025
• Lumeon achieved HITRUST r2 certification in June 2025
• Upfront Emerald earned HITRUST r2 in December 2024; Upfront Ruby earned HITRUST e1 in August 2025

Negative

• None.

SALT LAKE CITY, Nov. 10, 2025 /PRNewswire/ -- Health Catalyst, Inc. ("Health Catalyst," Nasdaq: HCAT), a leading provider of data and analytics technology and services to healthcare organizations, today announced that Twistle by Health Catalyst (Twistle), Lumeon by Health Catalyst (Lumeon), and Upfront by Health Catalyst (Upfront) have earned certified status by HITRUST for information security.

HITRUST r2 Certification demonstrates that Twistle, Lumeon, and Upfront have met demanding regulatory compliance and industry-defined requirements that assess whether offerings are appropriately managing risk. Twistle earned this certification in September 2025; Lumeon in June 2025. Upfront, with its Emerald solution hosted on Microsoft Azure, earned HITRUST r2 Certification in December 2024 and, in August 2025, attained a HITRUST e1 for its Ruby solution. These achievements place Health Catalyst in an elite group of organizations worldwide that have earned this certification.

By including federal and state regulations, standards, and frameworks and incorporating a risk-based approach, the HITRUST Assurance Program helps organizations address security and data protection challenges through a comprehensive and flexible framework of prescriptive and scalable security controls.

"Organizations like ours are continually under pressure to address both current and emerging threats, while navigating complex compliance, information protection, and privacy requirements," said Kevin Scharnhorst, Chief Information Security Officer at Health Catalyst. "Achieving HITRUST Certification underscores our commitment to staying ahead of this evolving landscape and demonstrates to our customers that we adhere to high standards of data protection and information security."

"Without consistency, transparency, and reliability, an information security assessment can't provide the requisite level of assurances needed to make important business decisions. That's why we focus on producing the highest quality reports available," said Vincent Bennekers, Vice President, Quality at HITRUST. "Achievement of a HITRUST r2 Certification is an assurance that Health Catalyst takes compliance and information risk management seriously."

Together, these certifications reinforce Health Catalyst's unwavering commitment to safeguarding customer data, strengthening trust, and supporting healthcare organizations with highly reliable technology and services. Health Catalyst will continue to prioritize security and compliance as critical foundations for enabling better outcomes across the healthcare system.

Visit Health Catalyst's Information Security page for a complete overview of our security program and compliance initiatives.

About Health Catalyst

Health Catalyst (Nasdaq: HCAT) is a leading provider of data and analytics technology and services that ignite smarter healthcare, lighting the path to measurable clinical, financial, and operational improvement. More than 1,100 organizations worldwide rely on Health Catalyst's offerings, including our cloud-based technology ecosystem, Health Catalyst Ignite™, AI-enabled data and analytics solutions, and expert services to drive meaningful outcomes across hundreds of millions of patient records. Powered by high-value data, standardized measures and registries, and deep healthcare domain expertise, Ignite helps organizations transform complex information into actionable insights. Backed by a multi-decade mission and a proven track record of delivering billions of dollars in measurable results, Health Catalyst continues to serve as the catalyst for massive, data-informed healthcare improvement and innovation.

Media Contact:

Kathryn Mykleseth
Director of Public Relations and Communications
media@healthcatalyst.com

Investor Relations Contact:

Matt Hopper
SVP of Finance and Head of Investor Relations
ir@healthcatalyst.com 

View original content to download multimedia:https://www.prnewswire.com/news-releases/health-catalyst-achieves-hitrust-r2-certification-demonstrating-the-highest-level-of-information-protection-assurance-302610558.html

SOURCE Health Catalyst

FAQ

What did Health Catalyst (HCAT) announce about HITRUST certification on November 10, 2025?

Health Catalyst announced that Twistle, Lumeon, and Upfront have earned HITRUST r2 certification for information security.

When did Twistle, Lumeon, and Upfront achieve HITRUST certification for Health Catalyst (HCAT)?

Twistle in September 2025, Lumeon in June 2025, Upfront Emerald in December 2024, and Upfront Ruby HITRUST e1 in August 2025.

How does HITRUST r2 certification affect Health Catalyst (HCAT) customers?

HITRUST r2 indicates adherence to a comprehensive, risk-based set of security controls intended to strengthen data protection and regulatory compliance.

Which Health Catalyst product earned a HITRUST e1 designation and when?

Upfront Ruby earned a HITRUST e1 designation in August 2025.

Where can investors find Health Catalyst (HCAT) information about its security and compliance program?

Investors can visit Health Catalyst’s Information Security page for a complete overview of its security program and compliance initiatives.