|

VBG Health Service

VBG Health Service is a dedicated provider of Applied Behavior Analysis (ABA) services focused on creating meaningful and lasting change within the community. Since its founding in November 2022, the organization has proudly supported over 150 clients, delivering high-quality, evidence-based behavior analysis programs that promote growth, learning, and independence. Rooted in integrity, compassion, and excellence, VBG Health Service INC is committed to helping individuals and families achieve their full potential through personalized care and professional support.

Overview

This Trust Center provides an overview of VBG Health Service’s security, privacy, and compliance practices.

It is intended to promote transparency and support customer and partner due diligence by outlining how risk is managed, data is safeguarded, and regulatory expectations are addressed.

The information presented summarizes progress across 1 compliance framework(s), third-party risk oversight covering 10 vendor(s), and 26 documented security and compliance policies.

The most recent compliance report was published in December 2025.

These efforts reflect an ongoing commitment to responsible data stewardship and continuous improvement.

Compliance

HIPAA
Complete

Control Domains

  • Business Environment • Complete • 1 of 1 controls complete
  • Risk Assessment • Complete • 6 of 6 controls complete
  • Risk Management Strategy • Complete • 2 of 2 controls complete
  • Supply Chain Risk Management • Complete • 15 of 15 controls complete
  • Processes and Procedures • In Progress • 55 of 65 controls complete
  • Identity, Access, and Authentication • In Progress • 3 of 14 controls complete
  • Governance • In Progress • 17 of 18 controls complete
  • Data Security • In Progress • 22 of 43 controls complete
  • Awareness and Training • In Progress • 5 of 6 controls complete
  • Asset Management • In Progress • 3 of 4 controls complete

Subprocessors

  • ABASmart • ABA Therapy Software
  • Agency for Health Care Administration • Government – Healthcare Oversight
  • AT&T • Internet Service Provider
  • Availity • Health Information Network
  • Community Care Plan • Health Insurance
  • Florida Medicaid • Government – Healthcare Program
  • Molina Healthcare • Health Insurance
  • NPPES • Government – Provider Registry
  • Sunshine Health • Health Insurance
  • United Healthcare • Health Insurance

Operational Monitoring

Reports

  • Cybersecurity Assurance Report • December 2025
  • VBG HIPAA Risk Assessment 2025 • December 2025

Policies

  • Asset Management Policy • November 2025
  • Auditing Policy • November 2025
  • Authorization for Use and Disclosure of PHI Policy • November 2025
  • Awareness Training & Personnel Security Policy • November 2025
  • Business Associate Agreement (BAA) Policy • November 2025
  • Business Continuity & Disaster Recovery Policy • November 2025
Show all (20 more)
  • Change Management Policy • November 2025
  • Data Retention & Disposal Policy • November 2025
  • Encryption Policy • November 2025
  • Evaluation Policy • November 2025
  • Identity & Access Management (IAM) Policy • November 2025
  • Incident Response Policy • December 2025
  • Information Classification & Management Policy • November 2025
  • Information Security Policy • November 2025
  • Network Management Policy • November 2025
  • Notice of Privacy Practices (NPP) Policy • November 2025
  • Physical Security Policy • November 2025
  • Privacy Rule Policy • November 2025
  • Remote Work Policy • December 2025
  • Risk Management Policy • November 2025
  • Sanction Policy • December 2025
  • Security Rule Policy • November 2025
  • System Development & Procurement Policy • November 2025
  • Vendor Management Policy • November 2025
  • Vulnerability Management Policy • November 2025
  • Workforce Clearance & Termination Policy • November 2025

A status of “Complete” indicates that applicable compliance areas are up to date at the time of assessment. A status of “In Progress” indicates that one or more items require attention. “In Progress” does not necessarily indicate non-compliance. For example, an annual policy review that is overdue does not imply non-compliance if reviews are otherwise conducted regularly.

This Trust Center is provided for transparency and informational purposes. It is intended for customers, partners, and other stakeholders with sufficient context to understand its scope. Some content may be generated or assisted by automated or AI-based systems to improve clarity and consistency. Datagrasp continuously reviews and refines this information as part of its commitment to accuracy and trust.