Neon has completed its HIPAA compliance audit, enabling healthcare organizations and SaaS platforms to store Protected Health Information (PHI) on its serverless Postgres platform. Key safeguards include encryption in transit and at rest, RBAC with audit logging, incident response with breach notification within five business days, continuous monitoring, employee training, and Business Associate Agreements (BAAs) with subcontractors. Customers share responsibility for proper configuration. Neon also holds SOC 2 Type 2, ISO 27001, ISO 27701, GDPR, and CCPA certifications, with PCI-DSS compliance planned for Q2.
