Certificate Authorities

Certificate Authorities

The DirectTrust Certificate Authority Accreditation Program (CAAP) provides a comprehensive framework for entities involved in digital certificate issuance within the healthcare industry. It encompasses stringent criteria to ensure secure and reliable certificate services, focusing on policies and structures, identification and authentication processes, certificate life-cycle management, and technical security controls. The program mandates strict adherence to industry standards for privacy and security, including HIPAA compliance, and requires detailed documentation and procedures to be in place for all aspects of certificate management. This ensures a high level of trust and security in the exchange of health information. 

Organizations seeking CA Accreditation must demonstrate compliance with HIPAA privacy and security regulations. This involves providing proof of a valid DirectTrust Privacy and Security accreditation, HITRUST certification or WebTrust certification.