@grepr/cli 1.9.2-deb34f6 → 1.9.2-e5df9b4

package/build/dist/docs-index/{68c6015f-f83c-4ac0-abc4-33a7a7fc57be.txt → 2335b17c-a3e8-4d83-815a-00dffea085b3.txt}

@@ -64,7 +64,7 @@ During incidents or anomalies, Grepr automatically increases the granularity of
 
 ### Is my data secure in Grepr?
 
-Yes, Grepr maintains SOC 2 Type II certification and implements enterprise security controls including encryption in transit (TLS 1.2+) and at rest, role-based access controls, and secure identity management with Auth0.
+Yes, Grepr maintains SOC 2 Type II certification and a HIPAA attestation, and implements enterprise security controls including encryption in transit (TLS 1.2+) and at rest, role-based access controls, and secure identity management with Auth0.
 
 ### Can I use Grepr with my existing observability tools?
 

package/build/dist/docs-index/{273f42a6-9913-44d6-928c-754d09b99868.txt → 8e9d05b1-7ec7-4b2f-9712-6a3eab5a8e4e.txt}

@@ -37,7 +37,7 @@ For programmatic access, the Grepr CLI and REST API also support functionality f
 
 ## Security in the Grepr platform
 
-The Grepr platform offers comprehensive security and compliance features to safeguard your data and fulfill enterprise security requirements. These features include secure authentication and identity management with OAuth 2.0, SOC 2 Type 2 compliance, HIPAA compliance, infrastructure and networking security, and data encryption.
+The Grepr platform offers comprehensive security and compliance features to safeguard your data and fulfill enterprise security requirements. These features include secure authentication and identity management with OAuth 2.0, SOC 2 Type II compliance, HIPAA compliance, infrastructure and networking security, and data encryption.
 
 See [Security in the Grepr platform](/grepr-platform/security).
 
@@ -101,7 +101,7 @@ You can interact with Grepr through three primary methods: the web-based UI for
 
 ### What security features does Grepr provide?
 
-Grepr offers comprehensive security features including secure OAuth 2.0 authentication and identity management, SOC 2 Type 2 compliance, HIPAA compliance, infrastructure and networking security, and data encryption. These features safeguard your data and fulfill enterprise security requirements.
+Grepr offers comprehensive security features including secure OAuth 2.0 authentication and identity management, SOC 2 Type II compliance, HIPAA compliance, infrastructure and networking security, and data encryption. These features safeguard your data and fulfill enterprise security requirements.
 
 ### How does Grepr ensure high availability?
 

package/build/dist/docs-index/{c8d961d6-a94a-437c-b740-bf33068b2233.txt → abe36a59-5a49-4925-a95f-1e403c77e722.txt}

@@ -1,4 +1,4 @@
-Grepr's SOC 2 Type II certified security program includes enterprise infrastructure, compliance, and data protection for secure observability.
+Grepr's security program is SOC 2 Type II certified and HIPAA attested, with enterprise infrastructure, compliance, and data protection for observability.
 
 # Security in the Grepr platform
 
@@ -18,7 +18,13 @@ Grepr has successfully completed a SOC 2 Type II audit by an independent third-p
 
 To request the complete SOC 2 Type II report, please contact the [security team](mailto:security@grepr.io).
 
-For the most information on subprocessors and compliance certifications, visit the [Trust Center](https://trust.grepr.ai/).
+### HIPAA compliance
+
+Grepr has completed a HIPAA attestation performed by A-lign, the same independent auditor that conducts the SOC 2 Type II audit. The attestation verifies that the controls safeguarding *protected health information* are designed and operating effectively.
+
+If your organization requires a Business Associate Agreement (BAA), Grepr signs one. To request a BAA or the complete HIPAA attestation report, please contact the [security team](mailto:security@grepr.io).
+
+To learn more about subprocessors and compliance certifications, see the [Trust Center](https://trust.grepr.ai/).
 
 ## Security architecture
 
@@ -86,7 +92,7 @@ For the most information on subprocessors and compliance certifications, visit t
 
 Grepr understands that enterprise buyers require ongoing assurance of security practices:
 
-* **Regular attestations**: The SOC 2 Type II certification is renewed annually.
+* **Regular attestations**: The SOC 2 Type II certification and the HIPAA attestation are renewed annually.
 * **Transparency**: Grepr is committed to clear communication about security practices.
 * **Continuous improvement**: The security program evolves with emerging threats and best practices.
 
@@ -100,6 +106,14 @@ For detailed security information, compliance documentation, or to report securi
 
 Yes, Grepr has completed a SOC 2 Type II audit verifying that security controls are well-designed and operating effectively. The certification covers security, availability, processing integrity, confidentiality, and privacy.
 
+### Is Grepr HIPAA compliant?
+
+Yes, Grepr has completed a HIPAA attestation performed by A-lign, the same independent auditor that conducts the SOC 2 Type II audit. The attestation verifies that the controls safeguarding protected health information are designed and operating effectively.
+
+### Does Grepr sign a Business Associate Agreement?
+
+Yes, Grepr signs a Business Associate Agreement (BAA) with any customer that requires one. To request a BAA, contact the security team at security\@grepr.io.
+
 ### How does Grepr authenticate users?
 
 Grepr uses OAuth 2.0 with Auth0 for UI authentication and supports SAML and OpenID Connect (OIDC) for enterprise identity management. Grepr does not store passwords or credentials directly.
@@ -134,4 +148,4 @@ Grepr maintains a formal incident response plan with a dedicated security team p
 
 ### Can I get the complete Grepr security documentation?
 
-Yes, contact the security team at security\@grepr.io to request the complete SOC 2 Type II report, subprocessor information, compliance certifications, and other security documentation.
+Yes, contact the security team at security\@grepr.io to request the complete SOC 2 Type II report, the HIPAA attestation report, a Business Associate Agreement (BAA), subprocessor information, compliance certifications, and other security documentation.