Subprocessors
This page summarizes the third-party services PHIGuard uses to operate the platform and the public marketing site.
Customer-tenant integrations such as Google Workspace and Microsoft 365 calendar connections operate within the customer's own tenant boundary and are not listed here as PHIGuard subprocessors.
Current list
| Name | Purpose | Data scope | Current status |
|---|---|---|---|
| Managed database provider | Managed PostgreSQL database hosting | Application data and audit data stored in PostgreSQL | Database provider |
| Sentry | Application error monitoring and alerting | Sanitized error and request metadata with PHI scrubbing enabled | Operational monitoring |
| Resend | Transactional email and marketing email delivery | Recipient email address and message metadata only; no PHI permitted in email content | Email delivery |
| Stripe | Subscription billing and payment processing | Organization billing metadata and billing contact details only; no PHI permitted | Billing provider |
| PostHog | Marketing-site analytics only | Public-site analytics only; not loaded in the authenticated app | Marketing analytics |
Change notice
PHIGuard updates this list as subprocessors are added, removed, or materially changed.
Contact
Questions about subprocessors or vendor controls can be sent to angel.campa@phiguard.app.