They are tested and certified regularly through a combination of frameworks and assessment activities, including Service Organization Control Federal Risk and Authorization Management Program, the Health Insurance Portability and Accountability Act (HIPAA) and others.