Industries
Industries we work in.
Nearly all of our clients answer to a regulator, an examiner, or an enterprise customer’s security team. Each page below covers what that party expects and what we do about it.
Supporting organizations in
- Healthcare
- HIPAA
- Banking & lending
- GLBA, FFIEC, NY-DFS
- Insurance
- NY-DFS Part 500
- Retail
- PCI-DSS
- Technology
- SOC 2
- Professional services
- Client due diligence
Industries
Choose your industry.
Healthcare
Providers, payers, and business associates. HIPAA Security Rule risk assessments, ePHI protection, and OCR-ready documentation.
Learn moreFinancial services
Banks, credit unions, mortgage lenders, and wealth managers working under overlapping state and federal security requirements.
Learn moreInsurance
Carriers, agencies, and TPAs with NY-DFS Part 500 obligations and significant policyholder data liability.
Learn moreRetail
PCI-DSS compliance and payment security across distributed locations, from flagship stores to remote point-of-sale.
Learn moreTechnology & SaaS
Application and API testing, AI red teaming, and the SOC 2 evidence your customers’ security teams request.
Learn moreProfessional services
Law firms, consultancies, and advisors that hold client data and answer client security questionnaires.
Learn moreWhat auditors look for.
We have sat in on our clients’ audits and examinations, so programs are documented against the framework in question from the start. Our clients have passed every audit they have brought us into.
The engineers doing the work have built encryption programs for Google, Mastercard, Walmart, and AT&T.
Not on this list?
If you handle regulated data and have a requirement you are not sure how to meet, tell us what it is.
(503) 389-3174 · info@sidechainsecurity.com · Portland, Oregon