Skip to content
  • There are no suggestions because the search field is empty.

Responding to Security and Data Residency Audits

Find Zanda security, privacy, and hosting information for insurer, funder, or compliance questionnaires.

Zanda provides public security and data residency information you can use when completing practice audits or vendor questionnaires. The Zanda security page includes details about certifications, privacy compliance, infrastructure, data protection, and regional hosting.

In this article:

Find security and privacy evidence

Use the Zanda security page as the starting point for general security and compliance questions.

  1. Open Healthcare Data Security at Zanda.
  2. Review the sections on certifications, data management, internal environment, operational resilience, and third-party management.
  3. Download any relevant documents from the Zanda Security Downloadables section.

The security page includes information about ISO 27001 certification, HIPAA, GDPR, the Australian Privacy Act, encryption, AWS hosting, backups, penetration testing, and security documentation downloads.

Answer data residency questions

Use the Data Residency and Security section when an audit asks where customer data is hosted.

For Australian practices, the security page states that data is hosted in Sydney data centers. It also explains that Zanda stores customer data securely in Amazon Web Services (AWS) data centers and manages data according to regional security and privacy requirements.

If a questionnaire asks whether data is stored or transferred outside a specific jurisdiction, use the wording on the security page as your general reference. If the questionnaire requires account-specific confirmation, a signed statement, or written consent wording, contact Zanda so the team can review the exact requirement.

When to contact Zanda

Contact Zanda when a third party requires a response that goes beyond the public security page.

Examples include:

  • A signed vendor attestation.
  • A questionnaire that asks for account-specific infrastructure details.
  • Contract wording about written consent, data transfer restrictions, or government requirements.
  • A request for documents that are not listed in the security downloadables.

Include the exact question or questionnaire wording when you contact Zanda. This helps the team confirm the right documentation or response.

Frequently Asked Questions

❓ Where can I find Zanda security certifications?

Open Healthcare Data Security at Zanda and go to Global security & privacy certifications, proven compliance. The page lists Zanda security and privacy certifications and includes downloadable security documents.

❓ Where can I find Australian data hosting information?

Open Healthcare Data Security at Zanda and go to Data Residency and Security. The Australia section states that data is hosted in Sydney data centers.

❓ Can Zanda complete an insurer or funder audit questionnaire for my practice?

Zanda can help with security and infrastructure questions that require confirmation from the software provider. Send the exact wording from the questionnaire so the team can review what is being requested.

Related Articles