Blue Mountain Quality Resources
SCHEDULE A DEMO

NEWSROOM

Last Updated: November 2025

Security Is Our Highest Priority

At Blue Mountain, we take security seriously. Blue Mountain delivers enterprise grade security throughout application and processes, including physical, operational, network, system, application, access, and data.  We employ best practices and tools to ensure the highest level of confidentiality, integrity, and availability across every layer.  

Trust Center

Jump To Section

Compliance Standards

Aligning with industry regulations and best practices such as SOC2 and GDPR to meet the highest levels of security assurance.

Certifications and Audits

Blue Mountain performs SOC 2-Type 2 audits.  Our SOC 2 examinations are governed by a set of controls that are tested on a regular basis to ensure effectiveness. These reports are reviewed and examined by an independent auditor.

Security & Data Protection

At Blue Mountain, safeguarding your data is our top priority. We employ cutting-edge technologies and rigorous protocols to ensure the security of sensitive information, supporting the integrity of clinical research and the trust of our clients.

Blue Mountain’s approach to security includes:

  • Network Security: Utilizing firewalls, intrusion detection systems, and robust access controls to protect our infrastructure.
  • Customer Data Protection and Encryption: Data lifecycle is secured from ingestion to deletion. Data is encrypted at rest and in transit to prevent unauthorized access. Backups are scheduled and tested. Risk Assessments: Blue Mountain performs annual risk assessments and also utilizes third party risk management reviews to ensure we’ve covered everything.
  • Testing & Scanning: We perform penetration tests annually, proactively hunt for threats monthly, and scan for vulnerabilities weekly.
  • Secure SDLC that includes DAST and SAST and coverage for the OWASP Top 10.
  • Ongoing Training: We deploy company-wide security training quarterly and provide a custom secure training program for our development teams.
  • Reliability and Availability: 99.99% SLA backed by highly available environments and disaster recovery plans.

Privacy & Data Policies

As part of our commitment to security, Blue Mountain adheres to stringent privacy practices to protect your data and ensure compliance with global regulations.

Privacy Policy: Outlines how we collect, use, and safeguard your data. Visit our Privacy Policy page.

Official Communications and Website

To maintain transparency and security in all interactions, Blue Mountain confirms that:

  • Emails Only Come From Official Domains: All official email communications will always come from a bluemountain.io domain. If you receive an email from any other domain, please report it immediately.
  • No Third-Party Communications: Blue Mountain does not conduct official business through social media accounts or via third-party communication platforms.
  • Authorized Websites: Official web domains owned and operated by Blue Mountain include bluemountain.io, www.thebluemountainsummmit.com, and Coolbluecloud.com
  • Payments and Deposits: Electronic payments, like invoices and checks, are susceptible to distinct types of fraud. We encourage secure verification processes and a culture of education and awareness to safeguard against any attempted payment redirection or financial fraud. Reach out to your Customer Support team if you have any questions on the legitimacy of a request.

To report a security issue, please email [email protected]