EdLogics is a digital health communications company that uses gamification and game-based learning to improve health literacy, drive positive behavior change, and reduce healthcare costs for employers, health plans, universities, and communities nationwide. As its client base grows, EdLogics handles more sensitive health data, which makes security and compliance a mission-critical priority for the business and the organizations it serves.
As EdLogics scaled its platform to serve more employers and health plans, its AWS environment needed to keep pace. The team wanted to separate its cloud infrastructure into multiple AWS accounts, was due for a third-party HIPAA security risk assessment, and needed help preparing for a SOC 2 audit.
EdLogics also wanted to fine-tune its roadmap for reducing long-term security risk. It needed a partner who could assess the gaps, implement the right controls, and leave the team fully equipped to operate with confidence.
nClouds conducted a comprehensive security and infrastructure assessment to review and remediate gaps across identity, network, monitoring, and governance layers. From there, our engineers implemented a modern, scalable AWS security foundation built for a healthcare environment where data integrity and auditability are non-negotiable.
01
nClouds used AWS Control Tower to separate EdLogics’ infrastructure into a governed multi-account environment. AWS Config and AWS Security Hub give the team centralized, unified security visibility across every account.
02
nClouds centralized access through AWS IAM Identity Center, giving EdLogics consistent, auditable control over who can reach each account and what they can do there.
03
Our engineers hardened the network layer with AWS Transit Gateway for controlled connectivity between accounts and AWS Client VPN for secure remote access, reducing the platform’s attack surface.
04
Amazon GuardDuty, AWS CloudTrail, and Amazon Inspector now provide real-time threat detection, detailed activity logging, and ongoing vulnerability management, with alerting in place so the team can act quickly.
05
nClouds reviewed EdLogics’ environment against HIPAA and SOC 2 requirements and documented the controls the team needs for its HIPAA security risk assessment and upcoming SOC 2 audit.
06
The engagement included third-party penetration testing aligned to OWASP and NIST standards. The testing validated application security and delivered a prioritized remediation plan.
Rather than delivering a report and walking away, nClouds stayed hands-on through implementation, ensuring every control was live, tested, and documented before the engagement closed. EdLogics now has centralized governance and unified security visibility across its entire AWS environment. With hardened identity and network controls, real-time threat detection, and documented controls for HIPAA and SOC 2, EdLogics has a clear path to its SOC 2 audit and ongoing HIPAA compliance. Independent penetration testing validated its application security and gave the team a prioritized roadmap for what to address next. The new security framework is designed to grow with the business, so EdLogics can keep serving more employers and health plans while protecting the sensitive health data they trust it with.
