January 23, 2026

Article Summary: Penstock has achieved HITRUST r2 Certification, placing it among a select group of organizations that meet the industry’s most rigorous security and compliance standards and confirming the company’s commitment to protecting sensitive healthcare data.
WILLIAMSVILLE, N.Y., May 21, 2024 —Penstock Group, a leader in the healthcare payment integrity space, announced today that its internal payment integrity solution has earned certified status by HITRUST for information security. Risk-Based,2-year (r2) Certification demonstrates that Penstock has met demanding regulatory compliance and industry-defined requirements and is appropriately managing risk.
This achievement places Penstock in an elite group of organizations worldwide that have earned this certification. By including federal and state regulations, standards and frameworks, and incorporating a risk-based approach, the HITRUST Assurance Program helps organizations address security and data protection challenges through a comprehensive framework of prescriptive and scalable security controls.
“Achieving HITRUST Certification assures our clients that not only will they reap the benefits of a more effective, less-burdensome claims auditing process, but their sensitive and confidential information will be protected,” says President of Penstock, Steve Palma. “Trust is crucial in any business relationship —especially healthcare — which is why HITRUST Certification was a top priority for everyone at Penstock.” “HITRUST Certification is globally recognized as validation that information security and privacy controls are effective and compliant with various regulations,” says HITRUST chief innovation officer Jeremy Huval. “HITRUST Certification is considered the gold standard because of the comprehensiveness and applicability of the control requirements, depth of the assurance process, and level of oversight that ensures accuracy.”
Penstock is fully committed to the highest level of cybersecurity and protection of sensitive data.

.webp)
