Simplify your HITRUST audit with a single vendor
Choose the most trusted, tech-enabled HITRUST assessor.
The HITRUST Common Security Framework (CSF) is a comprehensive and certifiable security framework used by healthcare organizations and their business associates to efficiently approach regulatory compliance and risk management.
A-LIGN is a certified HITRUST Assessor and licensed CPA firm that combines decades of audit experience with MyCSF-integrated audit management technology to ensure you experience the most efficient audit process and get the highest quality report.
Contact us to get started with HITRUST
6,400+ companies trust A-LIGN for their compliance and cybersecurity needs
Demonstrate trust with HITRUST
With evolving threats in the healthcare industry, it is more important than ever to have a trusted audit partner to make sure your data stays secure. A-LIGN has decades of experience combined with an innovative audit management technology to provide an audit experience unparalleled in quality and efficiency.
With A-LIGN as your guide, you can confidently demonstrate trust and respect to your stakeholders and mitigate cybersecurity risks.
Why A-LIGN
A-LIGN is the only audit vendor in the market that integrates directly with HITRUST MyCSF to uniquely deliver a single-provider approach
Our mission is to be a true compliance partner through every stage of growth.
Compliance can drive revenue with the right partner. A-LIGN’s experienced auditors and innovative audit management platform do more than just check a box – we make sure you earn and keep your customers’ trust.
“Achieving HITRUST Certification as quickly and efficiently as possible at a minimal cost was really key for us.”
Jason Wheeler, VP of Cyber and Network Security at HealthBridge
“A-LIGN is truly interested in us and wanted us to succeed in our HITRUST Certification process. They did a demo with A-SCEND, and it was a great platform. It allowed us to link documents to controls and was super easy to get going. Our auditor team was fantastic as well! Very friendly, knowledgeable, and always ready to help.”
Dan Clark
Senior Network and Security Administrator
“A_LIGN has harmonized and consolidated our audits with a unified audit management process, and aligning with frameworks like HITRUST r2 and SOC 2. This approach streamlines compliance, reduces redundant efforts, and saves time and resources, allowing for more efficient risk management and reporting across the agency.”
Rozealieth San Nicolas
Director of Information Security
“Achieving HITRUST Certification as quickly and efficiently as possible at a minimal cost was really key for us.”
Jason Wheeler
VP of Cyber and Network Security
“A-LIGN did a phenomenal job and I was incredibly impressed with the auditing process. Their auditors made it easy for us and Solera has become A-LIGN’s biggest fan!”
Bruce Hoffman
Chief Compliance Officer
“Working with A-LIGN is a partnership. You’re not my vendor. You’re not somebody I tell what to do or you tell me what to do. You’re somebody who cares about my business.”
Angela Loehr Merek, VP of Account Services at Welvie
HITRUST Services
A-LIGN offers a single-vendor approach to HITRUST, enabling clients to streamline the process, create efficiencies, and centralize operations.
HITRUST e1 – 1 year Validated Assessment
The e1 is the cybersecurity essentials assessment with 44 control requirements and is meant for low-risk organizations that want to ensure they are maintaining good cybersecurity hygiene.
HITRUST i1 – 1 year Validated Assessment
The i1 Assessment is suitable for moderate assurance and results in a 1-year certification if requirements are met.
HITRUST r2 – 2 year Validated Assessment
This validated assessment focuses on a comprehensive risk-based specification of controls with a very rigorous approach to evaluation, suitable for high assurance requirements.
Interim Assessment Testing
If an r2 assessment was completed we will test a subset of requirements including 19 controls from the prior r2 assessment and determine the progress of any Corrective Action Plans.
Readiness Assessment
We examine your organization’s environment and flow of data between systems that are in-scope, identify gaps for control, and provide recommendations for remediation.
HITRUST Risk & Advisory Services
The A-LIGN Advisory Team will review your company’s policy and procedure documents and evaluate them against the HITRUST CSF standard.
As you grow, your compliance needs will grow
Your organizational needs are unique, which is why A-LIGN offers the widest breadth and depth of compliance services to help you protect your data and demonstrate trust to key stakeholders.
SOC 2
Trust the top issuer of SOC 2 reports in the world. Need something different? We’ve got you covered with SOC 1 and SOC 3 assessments.
ISO 27001
Reduce risk and optimize operations within your organization with ISO 27001. As an accredited ISO 27001 certification body, A-LIGN has helped hundreds of organizations meet their ISO certification needs.
PCI DSS
Need help protecting your customers’ credit card transaction data? As a PCI DSS Qualified Security Assessor Company, A-LIGN can help you with any part of your PCI DSS compliance journey.
Penetration Testing
Identify vulnerabilities before the hackers do. A-LIGN’s OSEE, OSCE, and OSCP Certified Penetration Testers will use the latest cybersecurity tactics to stress test your organizational setup.
Let’s talk about your compliance needs
As one of the top HITRUST assessors in the world, we’ve helped hundreds of clients successfully achieve HITRUST certification. Contact A-LIGN today to learn how we can help you during any part of your HITRUST journey.
Copyright © 2026. All rights reserved.