As a healthcare services provider, Omada Health is subject to stringent regulations, including the Health Insurance Portability and Accountability Act (HIPAA). Using AWS has helped it achieve certification under the Health Information Trust Alliance (HITRUST) Common Security Framework. HITRUST is a not-for-profit organization that works with healthcare technology, privacy, and information security leaders to develop information security standards for healthcare. “We rely on the security and availability of AWS to build a HIPAA-compliant service that participants and customers can trust,” says Dougherty. “It’s one reason we are the only digital DPP provider in the country to be HITRUST-certified.” The company also replicates data across multiple AWS Availability Zones to achieve business continuity and disaster recovery.

Security is critical for Omada Health customers. “We have to go through a major evaluation process, including onsite audits,” says Dougherty. “When we tell customers we use AWS and share its SOC type I, II, and III certifications, it elevates the conversation to how Omada Health adds value through security best practices.”

Availability and performance are also fundamental to participant experiences. “People who drop out don’t get better,” says Brickman. “The solution has to be working at the moment they need it, whether that’s stepping on a scale at 2:00 a.m. or accessing a meal plan while they’re on a business trip. If it’s not, they can get distracted and discouraged. The availability and performance of AWS enables us to build a highly engaging experience that drives better health outcomes.”