Accertify HIPAA compliance was announced on August 25 from Itasca, Illinois. The fraud decisioning company can now sell into healthcare organisations, HSA issuers, pharmacies, insurers and medical supply retailers. All of them handle protected health information.

Nothing about the underlying technology changed. Accertify HIPAA compliance leaves the Predictive Yes Platform screening exactly as it did last week. What shifted is which buyers can legally run it against their payment data.

Accertify HIPAA Compliance Arrives Under New Ownership

One detail in circulation needs correcting, because it misstates ownership. Accertify is no longer part of American Express.

Amex acquired it in 2010 and ran it as a wholly owned subsidiary offering supplementary fraud monitoring to key merchants. Then in January 2024, the card issuer agreed to sell the business to technology investment firm Accel-KKR. Amex noted it would keep relying on its own proprietary fraud programmes. So the Accertify HIPAA compliance move belongs to a private equity portfolio company rather than a card network subsidiary.

That matters commercially. A vendor backed by Amex carries different weight in a hospital procurement conversation than one backed by a growth investor. Meanwhile, the Amex association is doing quiet work in coverage that has not caught up.

What Accertify HIPAA Compliance Does and Does Not Certify

Precision helps on Accertify HIPAA compliance, because the wording invites a misreading. There is no official HIPAA certification. The Department of Health and Human Services certifies nobody. So organisations achieve compliance and may obtain third-party attestation, commonly through frameworks such as HITRUST.

Accertify says it achieved HIPAA compliance. However, the announcement does not specify how that was assessed. Self-attestation, an independent audit and a recognised certification framework are all possibilities. Consequently, a healthcare chief information security officer will ask before a procurement team moves. The answer determines how much the credential is worth.

None of that makes the milestone hollow. For a company selling into healthcare, lacking HIPAA compliance is a hard stop in procurement regardless of model quality. Clearing it opens doors that were locked.

The Accertify HIPAA Compliance Market Is Genuinely Large

Timing tracks a real shift in how people pay for care. Devenir research puts the HSA market at nearly 42 million accounts holding about $174 billion at the end of 2025. That money increasingly moves through cards and apps rather than paper claims.

Each of those digital rails is a target. Account takeovers, stolen credentials and unauthorised payments all follow. Until now, fraud vendors built for retail and travel were not cleared to touch the data healthcare payments generate.

The attention gap behind Accertify HIPAA compliance is measurable too. Healthcare fraud costs the industry tens of billions annually, and enforcement still concentrates on claims. The 2026 National Health Care Fraud Takedown charged 455 defendants across 56 federal districts. More than 90 doctors and other licensed professionals featured, over roughly $6.5 billion in claims and opioid abuse. That is where the attention goes. The digital payment layer sitting on top of it draws far less, which is exactly the opening Accertify is betting on.

Andy Mortland, vice president of product and development, frames it as a balance. Healthcare payments are digitising fast and fraudsters are following the money. Yet any screen has to work without adding friction while a patient is trying to pay for care.

What to Watch After Accertify HIPAA Compliance

Read the announcement for what it is. This is a sales-access move rather than a product breakthrough. Accertify HIPAA compliance gets the company into more conversations without winning any of them.

Competition remains real. Accertify contends with Kount and Signifyd in general commerce fraud. Other vendors work the healthcare and claims-fraud angle from different directions. Being cleared to sell is table stakes for entry, not differentiation once inside.

The test is a named customer. A health system, HSA custodian or pharmacy chain publicly using the platform would prove the credential converts. Watch for that over the next two quarters rather than for the compliance line appearing in more marketing copy.

For related reading, our analysis of AI and fraud threats covers evolving attack patterns. Our 2026 regtech guide maps the compliance landscape, while our piece on the future of payments tracks the digital rails carrying this risk. Accertify published the announcement through BusinessWire. Payments Dive reported the Accel-KKR sale, and the HIPAA Journal detailed this year’s enforcement takedown.

Fintechbits covers fraud prevention, healthcare payments and compliance technology. Nothing here constitutes financial or investment advice. All analysis represents the editorial views of Fintechbits.