Skip to Main Content

Press Releases

Elastic Path Commerce Cloud Is the First and Only MACH Commerce Solution Enabling HIPAA Compliance for Brands

Healthcare Brands Can Now Manage Their Complex Commerce Requirements with Confidence


Boston, Mass. Aug 17, 2022 - Elastic Path, the creator and leader of the Composable Commerce Movement, today announced Elastic Path Commerce Cloud is now the first and only MACH solution to enable HIPAA compliance for healthcare and life sciences branded manufacturers. Now, healthcare brands can manage their complex commerce requirements with a HIPAA-ready Composable Commerce solution.   

The COVID-19 pandemic accelerated the digital revolution for healthcare, according to a McKinsey article (Bestsennyy et al., Telehealth: A quarter-trillion-dollar post-covid-19 reality? 2022), telehealth utilization has stabilized at levels 38x higher than before the pandemic. Alongside traditional healthcare providers, many new brands have emerged with new digital offerings ranging from virtual visits to prescriptions to vitamins and more. In addition to HIPAA compliance requirements, many of these brands have the added complexity of managing multiple business models, multiple brands, and multiple channels. Without a HIPAA-ready composable solution, these brands were forced to utilize generic out-of-the-box commerce functionality or invest time and money to develop and maintain custom hacks. 

Elastic Path is dedicated to making Composable Commerce accessible to all brands, and now healthcare brands can embrace this approach with the confidence of a HIPAA-ready solution. This empowers healthcare branded manufacturers to curate a best-of-breed solution that fits their unique business needs today and provides the flexibility to adjust as their requirements evolve. With Elastic Path Commerce Cloud as the backbone, healthcare brands will have the control to design and launch unique product experiences across every route to market (multiple business models, brands, geographies, touchpoints, and experiences) without complex and costly workarounds. 

Elastic Path is committed to being a provider brands can trust. In addition to enabling HIPAA compliance, the company also completed SOC 2 Type II examination for Security. This achievement highlights the continued work to maintain effective security policies and procedures of SOC 2 Type I awarded last year. 

“We heard the challenges healthcare brands were facing to bring their digital commerce vision to life and knew becoming HIPAA-ready would enable them to embrace Composable Commerce and turn their visions into reality,” said Mukesh Judge, Vice President of Cloud Operations, Support, and Compliance. “We’re proud to uphold the highest security and compliance standards, and the addition of both enabling HIPAA-compliance and a successful SOC 2 Type II examination validates our commitment to being a provider customers can trust with their business-critical and revenue-driving systems.” 

Contact us to learn more about our HIPAA-ready solution. 

About Elastic Path
Elastic Path is the company powering mission-critical digital commerce for the world's leading brands, such as Intuit, Pella, T-Mobile, and over 250 other leading brands. As relentless innovators, Elastic Path pioneered the Headless Commerce space in 2011 and spearheaded Composable Commerce in 2020. Elastic Path provides industry-leading headless commerce solutions for digitally-driven brands to rapidly build, deploy, and continuously optimize highly differentiated commerce experiences. Elastic Path is a global company with offices in Boston, Newcastle, Reading, Toronto, and Vancouver.