MedStack

MedStack is a cloud security and compliance automation platform built for the digital health industry. Founded in 2015 and based in Toronto, Canada, the company provides tools that enable healthcare application developers to build, launch, and scale cloud-based applications that meet healthcare data privacy and security regulations. The company's primary product, MedStack Control, is a cloud developer platform that layers security architecture and compliance capabilities on top of cloud providers such as AWS. It provides inheritable compliance policies, evidence generation tools for certifications, and a system for responding to vendor security questionnaires. The platform is designed to help digital health companies satisfy regulatory requirements such as HIPAA and related healthcare data protection standards without building compliance infrastructure from scratch. In 2023, MedStack acquired Exos, adding additional compliance tooling to its portfolio. The combined offering includes both MedStack Control and Exos by MedStack, targeting healthtech developers and digital health startups across North America and the UK. MedStack has completed SOC 2 Type 2 audits and holds Cyber Essentials Plus certification. Its customer base includes digital health companies, and its platform has been accepted by payers and providers. In November 2024, MedStack joined Launchit Solutions, under which it now operates as a registered trademark.