Enterprise security and compliance

League’s CX platform maintains certifications, security protocols and compliance requirements to protect personal information and health data.

At League, we build privacy, security and compliance into every facet of our operations to protect members throughout their health journeys. 

To do this, our CX platform maintains strict requirements from international data security standards and regulations, including:

  • HITRUST Common Security Framework (CSF)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • European Union General Data Protection Regulation (EU GDPR)
  • Personal Information Protection and Electronic Documents Act (PIPEDA)
  • Systems and Organizations Controls 2 (SOC 2) Type II

To learn more about League’s security practices and protocols, download this whitepaper.