Case Study: AmerisourceBergen achieves enhanced patient-data protection and regulatory compliance with Thales CipherTrust Data Security Platform

AmerisourceBergen Ensures Customer Trust in the Highly-Regulated Healthcare Industry with Thales CipherTrust Data Security Platform

AmerisourceBergen, a Fortune 500 pharmaceutical distributor with over $200 billion in annual revenue and a global team of 41,000, needed to protect highly sensitive patient PHI/PII and vendor data while meeting strict healthcare regulations like HIPAA. To maintain customer trust and regulatory compliance across on‑premises and cloud systems, AmerisourceBergen sought a centrally managed, enterprise‑grade data protection solution and selected Thales and its CipherTrust Data Security Platform.

Thales implemented the CipherTrust Data Security Platform enterprise‑wide to centralize key management, protect encryption keys in FIPS 140‑2 Level 3 hardware security modules, and enforce granular access and security policies across hybrid infrastructure. The deployment improved resiliency and failover between data centers, simplified protection of cloud and robotic distribution systems, and helped AmerisourceBergen meet or exceed regulatory requirements—supporting ISO 27001 and ISO 9001 certifications and strengthening HIPAA compliance—while reinforcing customer trust.

AmerisourceBergen

Arvin Bansal

Senior Director