Last updated:
Note: This page lists subprocessors that Healthplex uses in connection with the EHR Services and this marketing website. Per the Terms of Service (Section 13), Healthplex will notify Customers at least 30 days before adding a new subprocessor that processes Customer Data or PHI. The live version of this page is the authoritative record. If you have questions, email privacy@healthplex.app.
EHR Services subprocessors
These subprocessors may process Customer Data, including PHI, as part of the Healthplex EHR platform.
| Subprocessor | Service | Location | Data processed | BAA available |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure (compute, storage, database hosting) | US / EU / IN / AU / SG / AE (per tenant region) | All Customer Data including PHI | Yes |
| Twilio | SMS notifications (appointment reminders, MFA codes) | US | Phone numbers, message content (no PHI in SMS by default) | Upon request |
| SendGrid (Twilio) | Transactional email (notifications, reports) | US | Email addresses, notification content (no PHI in email by default) | Upon request |
| Redis Labs / Upstash | In-memory cache and pub/sub (session data, real-time telemetry) | Co-located with AWS region | Session tokens, telemetry identifiers | Upon request |
| LiveKit | WebRTC media server (telehealth video sessions) | US / EU (per tenant region) | Video/audio streams for telehealth sessions | Upon request |
AI gateway subprocessors (conditional on tenant BYOK configuration)
The following AI providers are engaged only if the Customer has configured the platform to use their service via the BYOK gateway. They are not engaged by default. The default model is Ollama, self-hosted within Healthplex infrastructure.
| Subprocessor | Service | Location | Data processed | PHI sent by default |
|---|---|---|---|---|
| Anthropic (optional BYOK) | LLM inference | US | Prompts as configured by tenant | No — PHI is redacted before transmission unless tenant explicitly opts in with written instruction |
| OpenAI (optional BYOK) | LLM inference | US | Prompts as configured by tenant | No — same PHI redaction policy |
| Google (Gemini, optional BYOK) | LLM inference | US | Prompts as configured by tenant | No — same PHI redaction policy |
Marketing website subprocessors
These subprocessors are used only in connection with the marketing website (healthplex.app) and the sales process.
| Subprocessor | Service | Location | Data processed |
|---|---|---|---|
| Amazon Web Services (AWS) | Website hosting | US | Web server logs, contact form submissions |
| SendGrid (Twilio) | Sales email delivery | US | Contact form email addresses and inquiry content |
| [CRM placeholder] | Sales CRM / pipeline management | US | Contact form data (name, email, organisation) |
Subprocessor changes
Per Section 13 of the Terms of Service:
- Healthplex will notify Customers 30 days in advance before adding a new subprocessor that will process Customer Data or PHI.
- Customers may object within 15 days of notice. If the objection cannot be resolved, Customer may terminate for cause without penalty.
- Healthplex will update this page when subprocessors are added, removed, or materially changed.
To subscribe to subprocessor change notifications, email privacy@healthplex.app with subject “Subscribe: subprocessor notifications”.
Last reviewed: June 1, 2026 — Healthplex, Inc.