Dual recertification means core XiFin production infrastructure for revenue cycle and pharmacy carries a current, independently assessed certification

XiFin, Inc., a healthcare information technology company providing AI-enabled revenue cycle management and related technology to diagnostic laboratories, pathology groups, radiology practices, hospital outreach programs, and pharmacies, today announced that the XiFin^®Empower RCM System has achieved HITRUST Risk-based, 2-year (r2) Certified status for the third consecutive two-year term. XiFin also announced that its Pharmacy Documentation and Workflow System, Clinical Opportunity Messaging System, and Pharmacy Claims Processing and Reporting Systems have been recertified under the HITRUST Implemented, 1-year (i1) assessment.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261105607160/en/

XiFin continues to demonstrate its commitment to security and trust, achieving HITRUST r2 certification for the XiFin® Empower RCM System for the third consecutive two-year term, along with HITRUST i1 recertification for its Pharmacy Documentation and Workflow System, Clinical Opportunity Messaging System, and Pharmacy Claims Processing and Reporting Systems.

The r2 certification covers the XiFin Empower RCM System residing at SWITCH, Microsoft Azure, and Amazon Web Services (AWS), along with XiFin's corporate headquarters in San Diego, California, and the data centers that host the platform: the SWITCH facility in Las Vegas, Nevada, and Azure and AWS facilities in Washington State. The i1 certification covers the three pharmacy systems residing at Microsoft Azure.

HITRUST r2 certification is the framework's most comprehensive assurance. It requires an organization to select and implement controls scaled to its specific risk factors, undergo assessment by an authorized external assessor, pass HITRUST's independent quality review, and complete an interim assessment at the one-year mark to retain certification for the full two-year term. HITRUST i1 certification is a one-year, threat-adaptive assessment of a prescribed set of leading security practices that HITRUST updates as the threat landscape changes.

Healthcare organizations face growing expectations from regulators, payors, and their own boards to hold technology vendors to independently verified security standards rather than self-attestation. A current HITRUST certification allows a customer's risk team to rely on a validated assessment of XiFin's controls, often reducing the length of security review during procurement and renewal.

“Recertifying under r2 for a third term, and recertifying our pharmacy platforms under i1 in the same cycle, reflects a control program that runs every day of the year, not an exercise we complete for an audit,” said Marty Barrack, Chief Legal and Compliance Officer at XiFin. “Our customers are being asked harder questions about the vendors that touch protected health information. We want them to be able to answer those questions, and our HITRUST certification helps answer that.”

“Maintaining r2 and i1 certifications across platforms hosted at SWITCH, Azure, and AWS means our controls have to work consistently in three different environments and hold up to an external assessor's testing in each one,” said Bill Floeter, CISSP, CHPS, Senior Vice President, Security and Compliance at XiFin. “The value for a customer is practical. Their security team can start from a validated scope statement and spend its time on the questions specific to their environment, instead of re-testing controls HITRUST has already examined.”

“The HITRUST Assurance Program is rigorous and reliable because of the comprehensiveness of control requirements, depth of review, and consistency of oversight,” said Bimal Sheth, EVP, Standards Development & Assurance Operations at HITRUST. “HITRUST Certification demonstrates XiFin is taking the most proactive approach to cybersecurity, data protection, and risk management.”

XiFin's HITRUST certification letters and scope statements are available to customers and prospective customers on request. XiFin is listed in the Health3PT Vendor Directory of HITRUST-certified vendors. Additional information is available at www.xifin.com/what-we-do/security/.

About XiFin

XiFin is a healthcare information technology company that empowers organizations to navigate an evolving and increasingly complex healthcare landscape. The XiFin Empower AI RCM ecosystem and trusted data employ active intelligence and automation to reduce manual touches, coordinate workflows, accelerate customer innovation, and improve financial outcomes. Our comprehensive set of solutions—spanning revenue cycle management, clinical workflow enablement, laboratory information systems, and patient engagement—deliver The Power to Do Good® so that healthcare organizations can do more good for more patients. Visit www.XiFin.com, follow XiFin on LinkedIn, or subscribe to the XiFin blog to learn more.

HITRUST is a registered trademark of the HITRUST Alliance.

View source version on businesswire.com: https://www.businesswire.com/news/home/20261105607160/en/

“Our customers are being asked harder questions about the vendors that touch protected health information. We want them to be able to answer those questions, and our HITRUST certification helps answer that,” said Marty Barrack of XiFin.