Frequently Asked Questions

Yes, Vastian offers both Standard and Premier Support options. We also offer expanded Implementation Support for those wanting additional support on getting started.

Our sales team would love to talk to your organization about pricing. Click here to provide us information on what you would like to receive a quote on and a Vastian product specialist will connect with you on your needs.

Vastian offers solutions on an annual and subscription basis. The number of users may be increased at any time and will be prorated accordingly.

Vastian accepts payments by:
- Credit Card
- Check
- Purchase Order
- ACH/EFT

Vastian's platform helps your organization maintain compliance with a wide array of government and accrediting agency requirements. Our users have been through tens of thousands of inspections and surveys, and we've designed our solutions in collaboration with industry experts to help promote best practices.

Vastian's solutions help meet standards and requirements from:
- Joint Commission
- College of American Pathologists (CAP)
- DNV
- ISO
- FDA
- HIPAA and HITECH
- AABB
- COLA
- American Association for Laboratory Accreditation (A2LA)
- American Society for Histocompatibility and Immunogenetics (ASHI)
- and more

Vastian has third-party affirmed HIPAA compliance. Additionally, Vastian maintains an active HIPAA and HITECH risk mitigation policy. Most Vastian applications do not involve ePHI, but we treat all data with the same industry-leading security and confidentiality. If you plan on storing HIPAA or HITECH-protected ePHI in Vastian, you'll need a business associate agreement (BAA) with Vastian. We can work with your team to sign any necessary agreements.

Vastian's electronic signatures meet 21 CFR Part 11 requirements for legal validity and enforcement.

Vastian is the most secure Quality Management Software solution in healthcare today. Vastian is both SOC 2 Type 2 and FedRAMP certified, achieving the highest level of security of any QMS solution. We maintain a robust, industry-leading information security program that ensures the integrity and confidentiality of your data. Our team is dedicated to meeting all private, public, and federal requirements, employing best practices, and adhering to the highest standards of data protection.

Vastian's platform is provided as software-as-a-service, not installed on your organization's local network. That means no servers to deploy, no software to install or maintain, and no IT involvement from your organization. Your access is provided instantly, with the full protections of Vastian's information security program.

Vastian is committed to providing a platform that is available 24/7/365, always responsive, and never overloaded. We use a serverless cloud-based architecture, which provides redundancy, geo-replication, and scalability to meet user needs.

Vastian's platform is hosted in world-class data centers managed by Microsoft, which also hosts some of the world's leading companies and websites. This provides physical and administrative security over all of your data. Vastian employs web application firewalls to monitor and block malicious traffic. Data in Vastian is stored and processed in US-based data centers, never outside the country.

Vastian's data centers adhere to security controls for ISO 27001, ISO 27018, SOC 1, SOC 2, SOC3, FedRAMP, HITRUST, MTCS, IRAP, and ENS.

All website traffic and data in motion are secured and encrypted with HTTPS / SSL. Data at rest is encrypted with FIPS 140-2 compliant encryption methods, such as AES 256, to maintain privacy and confidentiality.

Vastian maintains a HIPAA and HITECH-compliant risk management program, including employee training, background checks, and an annual risk assessment. We deploy physical, administrative, and technical safeguards to keep your data safe.

All Vastian solutions use role-based access, allowing you to grant permissions to users based on role, job description, duties, and more. Permissions take effect immediately, with no delay or downtime. Users are denied access to any resource for which they do not have specific granted permissions.

Vastian automatically maintains full audit logs of all views and changes to data, maintained indefinitely. You can access audit logs from inside the platform at any time to review employee access and make sure any access is appropriate. No need to put in a request to us for you to see your own data.

Vastian maintains a comprehensive validation and verification program for our platform and updates. All changes are communicated to users in advance, along with steps necessary to validate the correct operation of the system. Vastian conducts annual and as-needed validation on the entire platform.

You can get all of your data, anytime. Vastian provides comprehensive backups delivered on a weekly or monthly schedule, or you can request them from the platform at any time. Backups contain all of your information in easy-to-use, non-proprietary formats, including original documents, spreadsheets, and copies of courses and competency assessments.