Infrastructure
We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Subprocessors
Trust Center Updates
SOC 1 Type II
Rightway has successfully completed a SOC 1 Type II examination, performed by Armanino. The report covers the period 1/1/26 through 9/30/26 and evaluates the design and operating effectiveness of our controls relevant to our clients’ internal control over financial reporting.
What this means for you
A SOC 1 Type II report gives our clients and their auditors independent assurance that the controls supporting our pharmacy benefit and health navigation services work as described, and that they worked consistently over time, not just at a single point in time.
Our commitment
Protecting our clients’ data and the integrity of the services we deliver is core to how we operate. This milestone builds on our existing security and compliance program, and we’ll continue to invest in strong controls, transparency, and continuous improvement.
Request our SOC 1 Type II report
The report is available to current clients and prospects under NDA. Contact GRC@rightwayhealthcare.com to request a copy or access it via our trust center.
Trust Center Rollout
Rightway is excited to rollout our Trust Center to assist our customers with their security reviews. We are open to your feedback and will be making continual improvements to add additional content and keep the system up to date.

