While technically a separate framework, HITRUST is a “mapped” attestation. It includes HIPAA requirements within its much larger set of controls. A HITRUST certification is effectively the most rigorous HIPAA attestation available.