Legal

Subprocessors

The outside services that help run Confirmity. Only vendors with a signed business associate agreement can receive PHI.

Last updated October 2, 2026Questions: hello@confirmity.app

Current list

These are the only vendors that process data for Confirmity.

VercelHosting and app serversBAA signed
Data it can receive
Runs the Confirmity app; PHI passes through it
Location
USUnited States
✓Non-PHI data Yes✓PHI & Part 2 Passes through
NeonDatabaseBAA signed
Data it can receive
Stores customer data, including PHI and Part 2 records
Location
USUnited States
✓Non-PHI data Yes✓PHI & Part 2 Stored

The PHI rule

A vendor without a signed BAA never receives PHI or 42 CFR Part 2 records.

Each vendor is reviewed before it receives any data, and again when its terms, location or own subprocessors change.

Changes

We update this page and the date at the top when we add or change a vendor. Customers with a signed BAA hear from us before a new vendor receives their PHI.

Contact

Email hello@confirmity.app for our vendor review notes or a copy of this list for your records.