Resources

Last Updated: July 19, 2026

Resources

Key policies, compliance statements, and support channels for MHC Information Services. Use this page as a single entry point when you need the document behind a claim on the site.

Security and risk

  • Security Policy: Coordinated vulnerability disclosure, response targets, and the controls we operate on this site
  • Governance: Why documented controls matter for regulated industries, and links to the policies that implement them

Compliance

  • HIPAA: How we align with the HIPAA Security Rule and when we sign BAAs
  • PCI-DSS: Service-provider PCI posture, SAQ, and AOC on request
  • Data Processing Agreement: Enterprise DPA for engagements that process personal data
  • Subprocessor Register: Current data processors, purposes, applicability, and primary locations

Support