Core technology providers
Supabase
Application data storage, account authentication, and supporting services for VitalSec.
Account information and service data needed to operate those features.
Vercel
Hosting and delivery of PatientLock websites and web applications.
Web request information and data processed to operate those applications.
Service-specific providers
SilverSky
Managed detection and response and other managed-security services when purchased in the applicable Service Order or SOW.
Security telemetry, alerts, cases, and service-administration data required for the purchased managed service.
KnowBe4
Security-awareness and phishing-training technology when that service is purchased.
Training user and campaign data required for that service.
SentinelOne
Managed endpoint protection technology when included in the purchased MDR/endpoint service.
Endpoint security telemetry and administration data required for that service.
Stripe
Payment processing for customers who use electronic checkout.
Billing and payment information handled for checkout.
Customer-specific architecture
The actual providers, deployment pattern, and data-flow obligations for a customer may differ based on the services purchased and the customer's architecture. Those differences should be documented in the applicable Service Order, SOW, DPA, or BAA before production use.
Changes
PatientLock will maintain this public list and provide any additional notice required by an executed DPA or customer agreement. Questions may be sent to privacy@patientlock.net.