{"statement_id":"st_0f8380f7303578fbaa6f","subject":{"kind":"organization","slug":"virtru","name":"Virtru","url":"https://sourcetier.com/vendors/virtru"},"attribute":{"key":"hipaa","label":"HIPAA compliance stated","unit":null,"core":true},"scope":null,"region":null,"first_recorded_at":"2026-09-02T06:49:06.983Z","current":{"claim_id":"75ebff26-c316-4139-b626-a05a113159dd","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-10-02","recorded_at":"2026-10-02T21:42:44.469Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!\\b(?:meet|meets|meeting|support|supports|supporting|stay|stays|staying|remain|remains|remaining)\\b[^.?!]{0,20}\\b(?:compliance|compliant|requirements|regulations|standards|needs|obligations)\\b[^.?!]{0,60})\\bHIPAA\\b(?!\\s*\\)?\\s*(?:[-‐‑‒–]\\s?)?(?:ready\\b|readiness\\b|aligned\\b))(?![^.?!]{0,120}(?:are considered|in mind\\b))","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...interoperability. Government Solutions CJIS CMMC CUI FERPA FTC SAFEGUARDS RULE GDPR GLBA HIPAA ISO 27001 ITAR Our Track Record Virtru customers sharpen the cutting edge: They are the t...","sources":[{"url":"https://www.virtru.com","tier":1,"type":"official_documentation","retrieved_on":"2026-10-02","role":"evidence"}]},"version_count":3,"versions":[{"claim_id":"b060ef7c-bdc6-433a-b903-45ad1ce7b345","value":true,"unit":null,"verification_state":"verified","confidence_recorded":90,"observed_on":"2026-09-02","recorded_at":"2026-09-02T06:49:06.983Z","ended_at":"2026-09-08T13:37:16.029Z","ended_by":"superseded","superseded_by_claim_id":"e1dc3e2c-4676-40a1-aba4-f99eab988ff4","withdrawal_reason":null,"valid_from":null,"extraction":"muster:\\bHIPAA\\b","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...and Privacy Protection Compliance CJIS CMMC / NIST / DFARS FERPA FTC Safeguards Rule GDPR HIPAA ISO 27001 ITAR PCI / GLBA / FINRA / SOX Commercial Aerospace Education Finance Healthcare...","sources":[{"url":"https://www.virtru.com","tier":1,"type":"official_documentation","retrieved_on":"2026-09-02","role":"evidence"}]},{"claim_id":"e1dc3e2c-4676-40a1-aba4-f99eab988ff4","value":null,"unit":null,"verification_state":"unknown","confidence_recorded":0,"observed_on":"2026-09-08","recorded_at":"2026-09-08T13:37:16.029Z","ended_at":"2026-10-02T21:42:44.469Z","ended_by":"superseded","superseded_by_claim_id":"75ebff26-c316-4139-b626-a05a113159dd","withdrawal_reason":null,"valid_from":null,"extraction":"urteil:praezision","reader":"human review in the precision sample","parser_version":null,"method":null,"excerpt":null,"sources":[{"url":"https://www.virtru.com","tier":1,"type":"official_documentation","retrieved_on":"2026-09-02","role":"checked_without_finding"}]},{"claim_id":"75ebff26-c316-4139-b626-a05a113159dd","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-10-02","recorded_at":"2026-10-02T21:42:44.469Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!\\b(?:meet|meets|meeting|support|supports|supporting|stay|stays|staying|remain|remains|remaining)\\b[^.?!]{0,20}\\b(?:compliance|compliant|requirements|regulations|standards|needs|obligations)\\b[^.?!]{0,60})\\bHIPAA\\b(?!\\s*\\)?\\s*(?:[-‐‑‒–]\\s?)?(?:ready\\b|readiness\\b|aligned\\b))(?![^.?!]{0,120}(?:are considered|in mind\\b))","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...interoperability. Government Solutions CJIS CMMC CUI FERPA FTC SAFEGUARDS RULE GDPR GLBA HIPAA ISO 27001 ITAR Our Track Record Virtru customers sharpen the cutting edge: They are the t...","sources":[{"url":"https://www.virtru.com","tier":1,"type":"official_documentation","retrieved_on":"2026-10-02","role":"evidence"}]}],"changes":[{"id":"36089","type":"documented","label":"First documented","material":true,"sentence":"Virtru: HIPAA compliance stated documented (verified). This is a finding of ours, not necessarily a new certification.","noticed_at":"2026-09-02T06:49:06.983Z","subject":{"kind":"organization","slug":"virtru","name":"Virtru"},"before":null,"after":{"value":true,"verification_state":"verified","confidence":90},"claim_id":"b060ef7c-bdc6-433a-b903-45ad1ce7b345","statement_id":"st_0f8380f7303578fbaa6f","corrected":null},{"id":"91266","type":"research_update","label":"Research update","material":false,"sentence":"Virtru: HIPAA compliance stated is no longer documented as yes; that value was withdrawn and is now recorded as not measured. This describes our measurement, not a change at the vendor. Corrected on 2026-10-02: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.","noticed_at":"2026-09-08T13:37:16.029Z","subject":{"kind":"organization","slug":"virtru","name":"Virtru"},"before":{"value":true,"verification_state":"verified","confidence":90},"after":{"value":null,"verification_state":"unknown","confidence":0},"claim_id":"e1dc3e2c-4676-40a1-aba4-f99eab988ff4","statement_id":"st_0f8380f7303578fbaa6f","corrected":{"by_event_id":"103648","on":"2026-10-02","reason":"the same value returned on 2026-10-02; two of our own readers write it differently. This was not a change at the vendor."}},{"id":"103648","type":"documented","label":"First documented","material":true,"sentence":"Virtru: HIPAA compliance stated documented (verified). This is a finding of ours, not necessarily a new certification.","noticed_at":"2026-10-02T21:42:44.469Z","subject":{"kind":"organization","slug":"virtru","name":"Virtru"},"before":{"value":null,"verification_state":"unknown","confidence":0},"after":{"value":true,"verification_state":"verified","confidence":71},"claim_id":"75ebff26-c316-4139-b626-a05a113159dd","statement_id":"st_0f8380f7303578fbaa6f","corrected":null}],"page_url":"https://sourcetier.com/statements/st_0f8380f7303578fbaa6f","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}