Spring Health

Spring Health

Search the Trust Center...
Ctrl +K

Spring Health | Trust Center

Everything you need to complete your security review is here. Browse documents, certifications, and compliance details with confidence. Our Trust Center is regularly updated to reflect the latest audit results, and subprocessor disclosures.

Quick links

Badges

gdpr
GDPR
ccpa
CCPA
hipaa
HIPAA

Our Philosophy

Our mission: To eliminate every barrier to mental health.
Spring Health is the leading comprehensive mental health benefit for employers. We help employees understand their mental health issues and connect with best-in-class providers to get the right treatment at the right time.

From early detection to full recovery, Spring Health is the only clinically validated solution in the market proven to be more effective than traditional mental healthcare. By combining the latest technology with vetted providers, we help engage 1 in 3 employees, reduce recovery times, and lower healthcare costs.

To support these outcomes, our security program is comprehensive and inclusive of key capabilities that we monitor and continuously improve. This includes published and communicated security policies, procedures, and standards, company-wide security training and awareness, data and infrastructure security, situational awareness via continuous monitoring, incident lifecycle management, business continuity and disaster recovery programs and plans, physical security controls, and management of inherited risks through a vendor management process.

We are an award-winning, passionate, and mission-driven team with the support of leaders in psychiatry. Spring Health is committed to the security and privacy of our members, and we will continuously improve and enhance our security program to meet current and future challenges.

Coming Soon

Current SOC2 Audit Period: 9/1/2025 - 8/31/2026

Quick Summary

One or more annual third-party audit(s)

Has a formal mobile device management (MDM) program

Annual third-party penetration testing

Has a disaster recovery plan

Subprocessors list available

Has cyber insurance

Will enter into a DPA

Deletes customer data on request

Uses a centralized IAM solution (SSO) to manage employee access

Has a privacy policy

Documents & Knowledge Base FAQs

Announcements

Want to learn more about Spring Health and our approach?

Check out our blog here! https://www.springhealth.com/blog

Featured Documents

Trusted by

Docusign
Instacart
Duolingo
Whole Foods Market
BlackRock
Kayak
General Mills
Fortive
Hershey's
Activision Blizzard
AES
J.B. Hunt
Wellstar Health System
AppLovin
Powered by Conveyor, the first end-to-end customer trust platform.
Learn more