Curogram Earns SOC 2 Certification for Secure Communication

Curogram has earned SOC 2 Type II certification. The result confirms that its HIPAA-compliant patient texting platform meets strict standards for data security and daily operations. The report was issued after an independent audit by Thoropass, a recognized leader in compliance readiness and assurance.

A Type II audit is not a one-time check. It tests whether security controls keep working over a long monitoring period. That makes it one of the strongest forms of proof a healthcare software vendor can show.

IRVINE, CA — April 29, 2025 — Curogram, a leading two-way texting platform for healthcare providers, announced today that it has achieved SOC 2 Type II certification. The milestone reflects the company's focus on data security, strong daily operations, and patient trust.

The audit looked at Curogram's internal controls, systems, and work processes. Each was measured against the SOC 2 framework set by the American Institute of CPAs (AICPA). A Type I report checks if controls are set up well on one date. A Type II report goes further and tests if those controls held up in real use over time.

This kind of proof matters more every year. Medical practices now rely on a growing stack of software, and every vendor that touches patient data adds risk. More practices now ask vendors for a SOC 2 report before they sign, not after.

For patient texting tools, the bar is even higher. These platforms send reminders, confirmations, and two-way messages. Those messages often include names, phone numbers, and visit details, so practices need to know that data is safe at every step.

Curogram's results show that strong security and strong results can go hand in hand. Practices using Curogram see SMS open rates of 98% and confirmation rates above 75%. Clients have cut phone call volume by up to 50%, and their no-show rates run 53% below the industry average.

One practice lowered its no-show rate from 14.20% to 4.91%. For a busy clinic, that means more filled time slots, steadier revenue, and fewer last-minute gaps in the day.

"Achieving our SOC 2 certification is a major milestone for Curogram," said Michael Hsu, CEO at Curogram. "It reinforces the trust our customers place in us and highlights that data security is—and always will be—a top priority."

The certification puts Curogram in a select group of health tech companies that can show this level of security and compliance. It also gives practices a report from an outside auditor they can review when they vet vendors. That is far more useful than a promise on a sales page.

Healthcare teams are under real pressure. Front desks are stretched thin, no-shows drain revenue, and patients expect quick, simple ways to reach their care team. At the same time, privacy rules leave no room for shortcuts, so practices need tools that are both easy to use and safe.

Thoropass guided Curogram through the full audit, from early prep to the final report. The Type II result shows that Curogram's security controls were not just in place. They were followed the same way, every day, across the full monitoring period.

Curogram connects directly with leading EHR and practice management (PM) systems to automate patient messages. Its core tools include appointment reminders, two-way texting, patient confirmations, and secure messaging. With SOC 2 Type II certification, Curogram is now an even more trusted partner for practices that want to modernize patient engagement.

About Curogram

Curogram is a HIPAA-compliant patient communication platform that helps medical practices of all sizes improve the patient experience. It connects with EHR and PM systems to automate reminders, confirmations, and two-way texting. That way, front desk teams spend less time on the phone and more time with patients. To see how it works, schedule a demo or visit www.curogram.com.

About Thoropass

Thoropass is a compliance and audit platform that helps companies achieve and maintain frameworks such as SOC 2, HIPAA, ISO 27001, and PCI DSS. It pairs compliance automation with in-house audit expertise.

Companies use it to move from readiness to final report in one place. Learn more at www.thoropass.com.