Subprocessors
Last updated 23 September 2026
Several infrastructure vendors show “BAA not executed” — an org-level Neon BAA exists on a HIPAA organization that is not yet serving production traffic; Vercel and Clerk agreements are not executed. Two entries say “no BAA” because those vendors never receive protected health information; that guarantee is enforced in code. The live deployment is synthetic data only.
Infrastructure
The services the platform runs on. In production they will hold or transit protected health information. Today the deployed apps use synthetic data only.
Managed Postgres — the primary database
Data: All platform data including protected health information, encrypted at rest
Org BAA accepted on the Valhalla Group HIPAA Neon organization. A dedicated HIPAA project exists. The live Vercel deployment still runs on a synthetic sandbox project that is not HIPAA-flagged. No real patient data is stored.
Application hosting and delivery for the web, admin and marketing apps
Data: Request routing and application execution; PHI transits, and is not stored at rest
HIPAA add-on (Pro, $350/mo) has not been purchased. Current production is a synthetic sandbox behind team protection.
Object storage for documents and attachments
Data: Uploaded documents and clinical attachments
Planned. The documents vault is not yet in service. AWS Artifact BAA has not been accepted.
Platform services
Services that handle a defined slice of data for a specific function.
Authentication and session management
Data: Name, work email, authentication factors. No clinical data.
Enterprise + HIPAA BAA sales request submitted 16 September 2026. Not executed. Organizations remain off.
Payment processing and merchant-of-record settlement
Data: Payment credentials, transaction amounts, and the minimum identifying data a payment requires
Payment card data is entered into PayArc-hosted fields and never reaches a trellOS server. PayArc is PCI DSS Level 1; the relationship is governed by the merchant agreement rather than a BAA.
SMS delivery for patient and workforce notifications
Data: Mobile number and message content
Planned. SMS is not enabled until the agreement and 10DLC registration are complete.
Services that never receive health information
These vendors do not sign business associate agreements, so the platform is built to keep protected health information away from them entirely. In each case the barrier is structural — a type system, a build-time corpus — not a rule someone has to remember.
Transactional email — workforce and vendor mail only
Data: Recipient address, an opaque count, and a link. No clinical content, ever.
Resend does not offer a business associate agreement. Rather than accept the risk, the platform makes it structurally impossible to send PHI through them: email templates are type-constrained so a patient name cannot be passed into one, a lint scans the rendered output, and a runtime check fails the send closed. This is why trellOS notifications tell you there is something to see rather than what it is.
Routing for the in-app AI assistant
Data: The user's typed question and passages retrieved from trellOS documentation. No patient, order or prescription data.
Every request is sent with zero data retention, restricting routing to providers under a ZDR agreement, and Vercel deletes prompts and outputs on completion. The assistant's knowledge is compiled from source files at build time, so there is no patient record it could retrieve, and questions that look patient-specific are refused before any call is made. See how we use AI.
Changes to this list
We give 30 days’ notice before adding a subprocessor that will handle protected health information, so a customer has time to object. Write to compliance@trellos.org to be notified of changes.
A vendor added in the product and not added here is a breach of our own agreements, so this page is maintained as part of shipping, not after it.
Where data is processed
All processing is in the United States. trellOS does not transfer platform data outside the US, and does not use a subprocessor that would.
Questions about anything on this page? compliance@trellos.org