Trust Center

Welcome to the Frontera Health Trust Center. Frontera Health is a healthcare technology company that specializes in AI-driven tools to support pediatric behavioral health providers. Our platform helps clinicians, supervisors, and operational teams streamline workflows, improve care quality, and gain deeper insights into therapy delivery. We also offer a direct-to-parent application to help families navigate the behavioral health ecosystem. Frontera Health serves a wide range of Applied Behavior Analysis (ABA) organizations, from small independent clinics to multi-state enterprises.

This Trust Center provides a comprehensive overview of Frontera Health's commitment to security, privacy, and compliance. Here, you will find detailed information about our practices and controls designed to protect your data and ensure the reliability of our services.

Our commitment to trust is demonstrated through rigorous operational practices and adherence to industry standards. We maintain a robust Information Security Program that supports compliance with applicable regulatory requirements, including HIPAA, the Colorado Privacy Act (CPA), and SOC 2 Trust Services Criteria. We regularly perform comprehensive, organization-wide risk assessments to identify and evaluate risks related to changes in systems, processes, technology, regulatory obligations, and organizational structure.

Frontera Health has undergone independent audits and holds a SOC 2 Type 1 report as of January 15, 2026, and a SOC 2 Type 2 report for the period of January 16, 2026, to May 15, 2026, both relevant to security. These reports attest to the suitability of the design and operating effectiveness of our controls.

Data protection is a cornerstone of our operations. We have a dedicated Data Protection Policy that outlines procedures and technical controls to safeguard customer data from unauthorized access and ensure its availability. This includes handling data according to its classification requirements, applying approved encryption standards, and implementing security controls such as authentication, authorization, and auditing. We also maintain high-level data flow diagrams and system architecture documentation to describe how data moves through our systems, where it is stored, processed, and transmitted.

Our operational practices are guided by a comprehensive set of formally documented information security and operational policies, including an Information Security Policy, Acceptable Use Policy, Access Control Policy, Change Management Policy, Incident Response Policy, Business Continuity Policy, Data Classification Policy, Vendor Management Policy, Logging and Monitoring Policy, Encryption Policy, Backup Policy, Privacy Policy, and HIPAA Security and Privacy Policy. These policies establish expectations for system configuration, password requirements, multi-factor authentication (MFA), access provisioning and deprovisioning, segregation of duties, monitoring activities, backup and recovery, and secure transmission of data. All policies are reviewed at least annually and are accessible to all employees and contractors.

We also implement continuous control monitoring using Drata to address security issues in a timely manner. Furthermore, all Frontera Health personnel, including employees and contractors, undergo background checks, sign confidentiality agreements, and complete security and HIPAA training prior to being granted system access. Our Vendor Management Policy ensures that third-party relationships are managed with appropriate contracts, including confidentiality and non-disclosure agreements, and Business Associate Agreements where applicable, to ensure the security of confidential data and Protected Health Information (PHI).

This Trust Center is designed to provide you with confidence in Frontera Health's commitment to maintaining high standards of security, privacy, and compliance across all our products and operations.