Express Scripts
SafeBaseVerified May 2026Express Scripts Compliance & Certifications
SOC 2 Type IIHIPAAHITRUSTPCI DSSSOXNIST
Frequently Asked Questions
Does Express Scripts have SOC 2 Type II?
Yes. Express Scripts holds SOC 2 Type II, HIPAA, HITRUST, PCI DSS, SOX, NIST certifications. You can view their trust center at trust.express-scripts.com for full security and compliance documentation.
Where can I find Express Scripts's security documentation?
Express Scripts publishes their trust center on SafeBase at trust.express-scripts.com. It includes security policies, compliance certifications (SOC 2 Type II, HIPAA, HITRUST, PCI DSS, SOX, NIST), and other documentation.
Is Express Scripts HIPAA compliant?
Yes, Express Scripts is HIPAA compliant and can support healthcare organizations that handle protected health information (PHI).