Vail Systems Trust Center Trust Center

Compliance Reporting Schedule

Vail maintains a comprehensive Security and Compliance Program that undergoes ongoing internal audits throughout the year, supplemented by annual certifications conducted by independent third-party auditors. In addition to these formal reviews, our environment is subject to continuous compliance monitoring to ensure alignment with applicable regulatory requirements, industry standards, and internal policies.

Annually:

PCI DSS Compliance Audit
Type 2 SOC 2 Compliance Audit
HIPAA Regulations Compliance Audit
Third-Party Penetration Testing

Information Security and Compliance Statement

Vail Systems is committed to upholding the highest levels of security, privacy, and data integrity to protect our customers and stakeholders. Our security program is dedicated to safeguarding data, maintaining trust, and ensuring business continuity by the availability and resilience of our services. Additionally, the program manages our compliance efforts with internal, client corporate, PCI, and HIPAA compliance frameworks and demonstrates compliance when requested.

Overview

Vail Systems Security Trust Center is a centralized location for key information and resources on Vail Systems security posture, compliance, and security documentation. Vail Systems Security Trust Center can be used by organizations in these helpful ways:

Organizations can access comprehensive documentation about Vail Systems security controls, compliance certifications, and attestation reports, and audits, enabling them to conduct thorough vendor security assessments, aligning with their own compliance requirements when using Vail Systems as a vendor.
Security and compliance teams can review detailed information about Vail Systems security practices, infrastructure security, data protection measures, and privacy policies through a comprehensive portal. This provides transparency into how Vail System safeguards customer data and maintains its security posture.

Compliance Standards

Our standards are designed and managed in alignment with the nation’s largest financial and healthcare institutions, and is comprised of:

Level 1 PCI DSS (Payment Card Industry Data Security Standard) Certified
SOC (Service Organization Control) 2 Type 2 Compliant
HIPAA (Health Insurance Portability and Accountability) Compliant
Hosted in SOC 1 and SOC 2 Compliant Data Centers
CPNI (Customer Proprietary Network Information) compliance
FCC (Federal Communications Commission) registered

Security Framework

Vail has implemented a comprehensive and robust security framework designed to protect the confidentiality, integrity, and availability of information assets across all systems and services. This framework:

Protects against unauthorized access, use, disclosure, disruption, modification, and destruction of information through layered administrative, technical, and physical safeguards.
Minimizes operational impacts by applying proactive risk management practices that identify, assess, and mitigate security and privacy risks before they can affect operations or customers.
Ensures compliance with applicable regulatory, contractual, and industry standards, including PCI DSS, SOC 2, and HIPAA.
Drives continuous improvement through regular internal and external audits, ongoing compliance monitoring, and periodic risk assessments to evaluate control effectiveness and identify opportunities to strengthen the security posture.

Through this integrated approach, Vail maintains a secure and resilient operating environment that safeguards customer data and supports ongoing business continuity and trust.

Compliance

PCI DSS v4.0

SOC 2® - SOC for Service Organizations: Trust Services Criteria - 2017 with March 2020 Updates

Health Insurance Portability and Accountability Act (HIPAA)

Resources

Vail Systems 2025 AOC

Vail Systems 2025 SOC 2 Type 2 with HIPAA

FreeClimb 2025 PCI AOC

Trust Center

Contact