# Waystar

Financial clearance automation

Research: https://www.safecli.org/company/waystar.com
Company: https://waystar.com

## Evidence status

Insufficient enterprise evidence
Source review: 2026-10-16T03:23:40.897Z
API: Unknown

Company-published claims, not independently verified controls. Unknown is not evidence of absence.

## Procurement checks

### Security assurance — Mixed claims — review

> SOC 2 Type II

Source: https://www.waystar.com/blog-5-strategies-to-reduce-future-cybersecurity-threats-in-the-healthcare-revenue-cycle/
Reviewed: 2026-10-16T03:23:40.897Z

> - Adheres to SOC 2 Type II because that provides evidence of long-term, ongoing processes that protect customer data

Source: https://www.waystar.com/blog-5-strategies-to-reduce-future-cybersecurity-threats-in-the-healthcare-revenue-cycle/
Reviewed: 2026-10-16T03:23:40.897Z

> SOC 2 is a security framework that specifies how organizations will protect client data from security incidents and unauthorized access.

Source: https://www.waystar.com/blog-5-strategies-to-reduce-future-cybersecurity-threats-in-the-healthcare-revenue-cycle/
Reviewed: 2026-10-16T03:23:40.897Z

- [ ] Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### SSO & provisioning — Needs clarification

> - Failures of Customer’s authentication or identity provider systems that cause authentication through directory authentication or single sign-on to become unavailable.

Source: https://www.waystar.com/support-terms/
Reviewed: 2026-10-16T03:23:40.897Z

> ● Failures of Customer’s authentication or identity provider systems that cause authentication through directory authentication or single sign-on to become unavailable.

Source: https://www.waystar.com/wp-content/uploads/2026/01/Iodine-Support-and-Enhancement-Terms.pdf
Reviewed: 2026-10-16T03:23:40.897Z

- [ ] Test SSO enforcement, user removal and privileged-account recovery.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Access controls — Not found


- [ ] Test least-privilege roles and cross-tenant access with separate test accounts.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Auditability — Not found


- [ ] Verify administrative and data-access events, retention and export.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Data handling — Not found


- [ ] Review DPA, subprocessors, retention, deletion, residency and AI training use.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Reliability & support — Not found


- [ ] Request SLA, incident history, recovery targets and support escalation terms.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

### Product effectiveness — Company-published

> In a proof-of-concept study, Waystar was able to improve accuracy by 13% and productivity by 500%.

Source: https://www.waystar.com/blog-waystars-year-in-review-6-key-milestones-for-the-future-of-healthcare-payments/
Reviewed: 2026-10-16T03:23:40.897Z

- [ ] Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
- [ ] Record reviewer, test date, scope, result and supporting artifact.

## Decision

- Owner:
- Intended use and data sensitivity:
- Blocking requirements:
- Pilot success criteria:
- Unresolved risks:
- Decision and review date: