Subprocessors
10Third parties that may process customer or patient data on our behalf. Each is bound by a data processing agreement and, where protected health information is involved, a Business Associate Agreement.
- Amazon Web Services (AWS)Cloud Hosting Provider
Public cloud infrastructure for production application services, encrypted datastores, and backups.
United States
- Microsoft AzureCloud Provider
HIPAA-eligible cloud services for document processing and enterprise identity integration.
United States
- Google CloudCloud Provider
HIPAA-eligible cloud services under a Business Associate Agreement, including Vertex AI model inference for clinical documentation review and appeal drafting. No model training on inputs, prompts, PHI, or client business data.
United States
- Firebase (Firestore & Authentication)Identity Provider & Database
Firebase Authentication provides sign-in, single sign-on, and multi-factor enforcement for our applications; Cloud Firestore stores encrypted application data under Google Cloud's HIPAA BAA.
United States
- SentryApplication Monitoring
Application error monitoring and performance diagnostics under an executed Business Associate Agreement, with sensitive-data scrubbing and restricted access controls.
United States
- InngestWorkflow Orchestration
Durable background workflow execution and event orchestration under an executed Business Associate Agreement, with payloads limited to the minimum necessary.
United States
- VercelCloud Hosting Provider
Edge hosting and deployment platform for web application front ends.
United States
- DockerContainer Infrastructure
Container image tooling and registry services used to build, store, and deploy application workloads. Customer data and protected health information are not intentionally stored in container images.
United States
- ResendTransactional Email
Delivery of account notifications and operational email. No protected health information is included in message bodies.
United States
1 to 10 of 10 results