Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » PCI DSS » Subcontractor

Subcontractor

A subcontractor is a third-party entity that a primary contractor hires to carry out particular cybersecurity-related services or tasks on the contractor’s behalf. Services like penetration testing, vulnerability assessments, and incident response may fall under this category.

Additional reading

HIPAA-compliant cloud

What is HIPAA Compliant Cloud Storage Providers

Your cloud service provider is HIPAA compliant. But that doesn’t mean you are too!  As a Covered Entity or a Business Associate who uses a HIPAA-compliant cloud to create, receive, maintain, and send protected health information (PHI), your compliance efforts don’t and mustn’t end there. While using a compliant cloud service provider is a must,…
soc 2 audit cost

How much does a SOC 2 Audit Cost in 2025

When you look to pitch for high-value projects in new markets, having a robust organization-wide security culture and a SOC 2 compliance report can be a significant advantage. Your security compliance could become the deciding factor that tips the scales in your favor. But a SOC 2 doesn’t come cheap.  Did you know a good…
HIPAA Compliant Data Storage

HIPAA-Compliant Data Storage Requirements

Healthcare data storage requires stringent rules and protocols given the sensitivity of the patient health information they deal with. The United States Health Insurance Portability and Accountability Act (HIPAA), therefore, defines the general guidelines on best practices for storing and protecting protected health information. HIPAA’s Privacy, Security, and Breach Notification rules give a fluid overview…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.