VENDORS & DATA HANDLING
Every vendor named.
Clear data boundaries.
Our PHI-handling vendors operate under Business Associate Agreements. Services outside that scope operate within a documented non-PHI boundary.
Last reviewed: September 2026
Back to the Trust CenterTHE REGISTER
BAAs where PHI is handled.
BAAs apply to the vendors’ applicable PHI-handling services, not every product offered by those companies. The non-PHI list is separate by design.
PHI-handling vendors
Business Associate Agreements in place
| Vendor | BAA |
|---|---|
| Google Cloud Platform | In place |
| In place | |
| Anthropic | In place |
| Twilio | In place |
| Stedi | In place |
| Documo | In place |
| MDToolbox | In place |
Non-PHI services
Outside the PHI-handling scope
| Vendor | BAA |
|---|---|
| Stripe | Not applicable |
| Firebase Authentication (Google) | Not applicable |
| Postmark | Not applicable |
FOR YOUR REVIEW
Need a contractual detail?
Contact our security team about applicable agreements, data boundaries or your procurement requirements. This register is maintained alongside our Privacy Policy and BAA.
security@moxcares.com