One security posture for every partner.

Sirona owns and operates the security posture of the unified cloud platform: an active SOC 2 Type II program, HIPAA safeguards with a BAA, encryption at rest and in transit, continuous audit logging and monitoring, incident response, and security questionnaire responses. When a partner requests a security review, Sirona's security team responds directly on your behalf. You inherit the posture.

Large health systems require extensive security reviews before integrating any vendor — hundreds of detailed questions about encryption, compliance controls, and incident response. Sirona answers those questionnaires directly, supplying security evidence and architecture diagrams, and the BAA you sign with Sirona covers your data wherever it flows. Practices that would struggle to qualify on their own qualify through Sirona.

Sirona runs an active SOC 2 Type II program — attestation details are shared with partners under NDA through your Sirona point of contact — and is HIPAA compliant with a Business Associate Agreement on every customer contract. Evidence is available on demand.

Sirona manages platform security — the cloud infrastructure, the application, the data at rest and in transit, and the integrations through Sirona. You remain responsible for managing your own users (role assignments, offboarding), the security of the endpoints they use (workstations, laptops, mobile devices), and any non-Sirona systems that touch patient data. Your Sirona point of contact walks through the responsibility matrix during onboarding.

Sirona's security team detects and responds to incidents in the platform. If an incident affects your data, Sirona investigates, contains, and communicates under HIPAA breach-notification timelines. You receive a full forensic write-up, a root-cause analysis, and remediation details. Your Sirona point of contact coordinates any partner notifications required by your contracts.

Sirona is actively expanding its security and compliance posture to support a number of international jurisdictions, including the U.K., South Africa, Australia, New Zealand, the UAE, and Europe. If there are additional certifications or security and compliance posture that customers might desire, that's something that can be actively discussed with your sales representative as part of an ongoing sales process.