Strout demonstrates industry-leading commitment to information security, privacy, and regulatory compliance with HITRUST r2 Certification
DALLAS (July 9, 2025) – Strout, a market leader in Medicare Coordination of Benefits (COB) payment accuracy solutions, today announced it has achieved HITRUST Risk-based, 2-year (r2) Certification. This milestone underscores Strout’s ongoing commitment to safeguarding sensitive healthcare data and maintaining the highest standards of information security and privacy.
The HITRUST r2 Certified status demonstrates that Strout has met rigorous regulatory compliance and industry-defined requirements and is appropriately managing risk. This achievement is particularly significant in the healthcare industry, where protecting patient data and ensuring regulatory compliance are paramount.
The HITRUST Assurance Program is based on the HITRUST CSF®, a certifiable framework that provides organizations with a comprehensive, flexible, and efficient approach to regulatory compliance and risk management. HITRUST r2 Certification builds upon established information security and privacy control frameworks including ISO, NIST, PCI, and HIPAA requirements.
“Achieving HITRUST r2 Certification reflects our unwavering dedication to protecting the sensitive healthcare information entrusted to us by our health plan partners,” said Stacey Stabenow, President of Strout. “As we continue to expand our technology-driven COB platform, maintaining the highest levels of security and compliance remains foundational to everything we do. This certification provides our clients with independent validation of our comprehensive security controls and risk management practices.”
The HITRUST r2 assessment process is comprehensive and thorough, requiring organizations to demonstrate effective implementation of appropriate security controls across multiple domains including:
- Information Security Management Program
- Access Control and Identity Management
- Risk Management and Compliance
- Network Security and Data Protection
- Incident Response and Business Continuity
- Third-Party and Vendor Management
- Physical and Environmental Security
The r2 Certification provides assurance to Strout’s health plan clients, third-party administrators, and partners that the company has implemented and maintains appropriate controls to protect confidential and sensitive information. This is especially critical given that Strout serves organizations collectively covering millions of members across the United States.
To achieve HITRUST r2 Certified status, an organization must undergo a rigorous assessment process conducted by a HITRUST-authorized assessor. The assessment validates that the organization’s information security program meets the HITRUST CSF requirements, which incorporate multiple regulatory frameworks and are specifically designed for the healthcare industry.
Strout’s HITRUST r2 Certification complements existing certifications including Women’s Business Enterprise (WBE) and Texas Historically Underutilized Business (HUB) status, further demonstrating the company’s commitment to operational excellence, compliance, and trusted partnerships.
About HITRUST
HITRUST is a non-profit organization whose mission is to champion programs that safeguard sensitive information and manage information risk for organizations across all industries and throughout the third-party supply chain. In collaboration with privacy, information security, and risk management leaders from the public and private sectors, HITRUST develops, maintains, and provides broad access to its widely adopted common risk and compliance management and de-identification frameworks; related assessment and assurance methodologies; and initiatives advancing cyber sharing, analysis, and resilience. For more information, visit hitrustalliance.net.
About Strout
Strout, formerly The Strout Company, is the market leader in Medicare Coordination of Benefits (COB) payment accuracy solutions. For more than 30 years, the company has combined expertise in complex healthcare regulatory issues and pioneering technology solutions to regional and national health plans, third party administrators (TPA) and partner companies, collectively covering millions of members. Based in Dallas, Strout is HITRUST r2 Certified and a certified Women’s Business Enterprise. Visit strout.ai to learn more.
Media Contact
Strout Media Relations
Email: inquiry@strout.ai