Why Zenith Labs chose TrustVendor
Zenith Labs processes protected health information in its clinical trial management platform. With 140 SaaS vendors in scope for their HIPAA program and no dedicated vendor risk analyst, BAA tracking was done manually in a spreadsheet. Two BAAs had lapsed undetected in a twelve-month period before TrustVendor was deployed.
How it deployed
TrustVendor was deployed company-wide with HIPAA BAA tracking enabled for all 140 vendors. PagerDuty escalation was configured for critical signals. The PHI data class was assigned to 32 vendors, triggering higher monitoring frequency and stricter decay thresholds for those relationships.
Results
BAA lapses are now detected within days rather than months. Two vendors were identified as having added subprocessors in restricted jurisdictions — a finding that would have been invisible under the previous process. The security team now handles vendor risk as part of their regular monitoring workflow rather than as a separate annual project.