# HITRUST Assessment XChange Reviews 2026. Verified Reviews, Pros & Cons | Capterra

> Is HITRUST Assessment XChange the right Compliance solution for you? Explore 7 verified user reviews from people in industries like yours to make a confident choice.

Source: https://www.capterra.com/p/212015/HITRUST-Assessment-XChange/reviews

---

HITRUST Assessment XChange

4.9 (7)

Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Learn more](https://www.capterra.com/our-story/)

* * *

Last updated August 24th, 2025

# Reviews of HITRUST Assessment XChange

Ease of use

4.6

Customer Service

4.9

## Showing most helpful reviews

Showing 1-7 of 7 Reviews

Sort by:

Most Helpful

Rating

Company Size

Reviewer's Role

Length of Use

Frequency of Use

YH

YR H.  
Lead Cyber Info Security Risk Analyst  
Insurance  
Used the software for: 6-12 months

### "The Total Package"

April 19, 2021

5.0

The work that we put into attaining HiTrust certification was a lot of work; but the ability to use a platform and service that would allow us to continue to align our risk management program with those same strategies is the best. Also- the team at the XChange listens to input from customers & users and has had some ability to add functionality based on our input.

Pros

The built in security controls for third party risk assessments- as well as the controls being based on HiTrust requirements. The functionality is easy to use. And the overall support and assistance of our Onboarding Specialist and Implementation/Account Representative has been nothing short of amazing. With our team being small- the extra knowledge and hands is great.

Cons

I wish we had the ability to search companies for HiTrust certification; however our Onboarding Specialist has been able to answer those questions.

Alternatives considered

[Diligent One Platform](https://www.capterra.com/p/268087/Diligent-One/)

Reason for choosing HITRUST Assessment XChange

The ability to use a platform and service that would allow us to continue to align our risk management program with those same strategies is the best.

Review Source

Response from HITRUST Assessment Exchange

April 20, 2021

Thank you for your review! We are happy to hear that you and your team are pleased with the HITRUST Assessment XChange!

DC

Derek C.  
Sr. Director of IT Infrastructure  
Information Technology and Services  
Used the software for: Less than 6 months

### "Shields feedback"

November 25, 2020

5.0

Great service for us, and ability to leap frog forward to build our vendor management program.

Pros

Great tool with simple portal capability that is easy to use.

Cons

We really woul like to see the ability to download the IRQ and HAX for a vendor.

Alternatives considered

[RSA Archer Suite](https://www.capterra.com/p/176996/RSA-Archer/)

Reason for choosing HITRUST Assessment XChange

Price, and the offering to have the team at HITRUST behind the tool.

Review Source

Response from HITRUST Assessment Exchange

December 1, 2020

Derek, thank you for your review! We are glad to hear the XChange has helped you leapfrog forward in building your vendor management program. Thank you for the helpful feedback regarding the ability to download reports. The XChange currently allows the download of IRQ results, and we will pass on your request for a report download capability to our product development team.

MB

Michael B.  
Manager of Security and Access  
Hospital & Health Care  
Used the software for: 6-12 months

### "Cone Health"

January 29, 2021

4.0

The product is effective in managing our vendor management program. Initially there were some challenges on how to approach the whole process but we worked together to identity the appropriate vendors and start small until we had a handle on the process.

Pros

For me, just having a score associated with a vendor is key. Both through IRQ and Rapid Assessment. Plus the ability to export the Rapid results so they are actionable. Our customer success team has been great and provided us direction and guidance. I know that is not software specific but they help us navigate the software effectively.

Cons

I would like to see more executive level reporting and more ability to create ad hoc reporting. For our internal business owners, some of the IRQ questions are challenging. They are worded in ways that can, in some cases, cause the end user to be unclear on how to answer.

Reason for choosing HITRUST Assessment XChange

Cone Health was working towards HITRUST certification and as part of our self assessment we identified a gap around our vendor management program. We saw where HITRUST had a program and it made sense to investigate.

Review Source

Response from HITRUST Assessment Exchange

February 1, 2021

Michael, we appreciate your review. Based on valuable input from customers like you, our team has recently deployed an enhanced reporting module. We are working on further innovation with new data visualization and more customized ad hoc capabilities.

BC

Brian C.  
Chief Information Security Officer  
Hospital & Health Care  
Used the software for: 6-12 months

### "Wellforce Review"

November 25, 2020

5.0

Using HAX has allowed us to enhance our Third Party Risk Management program without the need to add additional staff, since HITRUST is managing the vendor assessment process for us.

Pros

Standardized model for calculating both Inherent Risk and Residual Risk of vendors that uses the HITRUST framework for measurement. The ability to determine the level of assessment required for a vendor from a Rapid Assessment up to HITRUST CSF Certification. Vendors may already exist on the XChange which minimizes the assessment time.

Cons

As an early adopter of the platform, we worked with HITRUST to build out features most notability on various status updates. The reporting features are still in development, but API's can be used to integrate with GRC tools to support individual reporting needs.

Review Source

Response from HITRUST Assessment Exchange

December 1, 2020

Brian, we are pleased to hear the XChange has helped you enhance your Third-Party Risk Management program in an efficient manner. We want to thank you and your team for being early adopters of the XChange and helping guide the product development.

VS

Victor S.  
Sr. InfoSec Engineer  
Hospital & Health Care  
Used the software for: 6-12 months

### "A great solution to assist in our third-party risk management security assessments!"

November 24, 2020

5.0

Great experience, the staff and support are awesome and have had no issues with the overall program.

Pros

The ease of use is wonderful, easy to navigate console, and great overall workflow process.

Cons

Allow offline downloads for questionnaires would be a good feature.

Review Source

Response from HITRUST Assessment Exchange

December 1, 2020

Victor, it's great to hear you are pleased with your experience with the XChange. We appreciate your positive review and helpful feedback regarding the offline downloads for questionnaires. The full results of the IRQ and the Gaps and Not Applicable sections of the Rapid Assessment are currently available for download. We have passed on the request for additional report download functionality to our product development team.

CB

Chris B.  
National IT Director  
Medical Practice  
Used the software for: Less than 6 months

### "TPRM Done Correctly and Inexpensively"

November 24, 2020

5.0

TPRM is a full time job when performed properly. HITRUSTAX does it for me and does it well, freeing up my resources for other responsibilities and projects.

Pros

White glove setup, ability to customize to our requirements and wishes, diligent yet polite and professional follow up with my managed vendors, and the price. We are also HITRUST certified, so is nice that HITRUSTAX is under the same umbrella. We KNOW our TPRM partner is familiar with our compliance framework.

Cons

The portal is still maturing, but that can also be a strength because we are helping to polish the final product and get enhancements fairly quickly.

Reason for choosing HITRUST Assessment XChange

Price was a large factor, but we are also HITRUST certified, so HITRUSTAX was a natural choice.

Review Source

Response from HITRUST Assessment Exchange

December 2, 2020

Chris, it is great to hear the XChange is helping with your third-party risk management efforts! We appreciate you and your team's contributions to the product innovation efforts. Thank you for the positive review!

WH

Willie H.  
Sr. Information Security Analyst  
Health, Wellness and Fitness  
Used the software for: Less than 6 months

### "Efficient and simplistic "

November 25, 2020

5.0

Pros

A condensed effective questionnaire that gives assurance of the vendors security program.

Cons

Inability to export full report for record keeping purpose.

Reason for choosing HITRUST Assessment XChange

We are a HITRUST Certified shop.

Review Source

Response from HITRUST Assessment Exchange

December 2, 2020

Willie, we appreciate your positive review! Thank you for your helpful feedback regarding the ability to export full reports for record-keeping purposes. This request has been passed on to our product development team.

Similar Products

Featured

## Send me user reviews about this product

### Fill out the form and we'll send a list of the top-rated software based on real user reviews directly to your inbox.