Snapshot 250197

Document
Subprocessor list
URL
https://trust.noom.com/subprocessors
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
72629 bytes
SHA-256 (raw)
9aa2838c88b275bb9805b2ef733ffc5df8693f733cd4a5d1f418d66b6ba6855c
SHA-256 (normalized text)
9243eca1b0d7b3dd4dd33f6f9616ff68f7c1878088c97086205bf57ce8f54c2e

Parsed

What we read from this document, as JSON. Each entry names the snapshot it was read from.

{
  "entries": [
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "Accolade",
        "domain": "accolade.com",
        "purposes": [
          "Employer partnership and clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight."
        ],
        "locations": [
          "Employer health-benefits and care partner"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "amazon-web-services",
      "evidence_id": 250197,
      "data": {
        "name": "Amazon Web Services",
        "domain": "aws.amazon.com",
        "purposes": [
          "Database and application hosting. Data elements: all end user data."
        ],
        "locations": [
          "Cloud hosting"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "Amity",
        "domain": "amity.co",
        "purposes": [
          "Database and application hosting. Data elements: user access code and all data generated in Noom Communities (posts, comments, profile picture, etc.)."
        ],
        "locations": [
          "Cloud hosting"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "atlassian",
      "evidence_id": 250197,
      "data": {
        "name": "Atlassian",
        "domain": "atlassian.com",
        "purposes": [
          "Supports resolution of customer-facing issues. Data elements: health data, sensitive demographic data."
        ],
        "locations": [
          "Operational platform"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "Beluga Health",
        "domain": "belugahealth.com",
        "purposes": [
          "Provides clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight."
        ],
        "locations": [
          "Clinical vendor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "paypal-us",
      "evidence_id": 250197,
      "data": {
        "name": "Braintree",
        "domain": "braintreepayments.com",
        "purposes": [
          "Supports collecting payment from members. Data elements: user name, email, address, and payment information."
        ],
        "locations": [
          "Payment processor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "cloudflare",
      "evidence_id": 250197,
      "data": {
        "name": "Cloudflare",
        "domain": "cloudflare.com",
        "purposes": [
          "Network security and performance enhancement for end users. Data elements: all end user data."
        ],
        "locations": [
          "Content delivery network"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "databricks",
      "evidence_id": 250197,
      "data": {
        "name": "Databricks",
        "domain": "databricks.com",
        "purposes": [
          "Transforming data. Data elements: all end user data."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "datadog",
      "evidence_id": 9235,
      "data": {
        "name": "Datadog",
        "domain": "datadoghq.com",
        "locations": [
          "Cloud monitoring"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "decagon",
      "evidence_id": 250197,
      "data": {
        "name": "Decagon.ai",
        "domain": "decagon.ai",
        "purposes": [
          "Automated customer support platform. Data elements: user access code, email address, and all end user communication through the platform."
        ],
        "locations": [
          "Support platform"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "efax",
      "evidence_id": 250197,
      "data": {
        "name": "eFax",
        "domain": "efax.com",
        "purposes": [
          "Used for sending/receiving prior authorizations. Data elements: health data, sensitive demographic data."
        ],
        "locations": [
          "Fax"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "fivetran",
      "evidence_id": 250197,
      "data": {
        "name": "Fivetran",
        "domain": "fivetran.com",
        "purposes": [
          "Extract user events and engagement from 3P platforms. Data elements: ad impressions and end user engagement."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "Formal",
        "domain": "formal.ai",
        "purposes": [
          "Secure data access tool. Data elements: all end user data."
        ],
        "locations": [
          "Data security"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "google-cloud",
      "evidence_id": 250197,
      "data": {
        "name": "Google",
        "domain": "google.com",
        "purposes": [
          "Used to optimize advertising, monitor user events and engagement. Data elements: all end user data."
        ],
        "locations": [
          "Marketing, data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "google-cloud",
      "evidence_id": 250197,
      "data": {
        "name": "Google Workspace",
        "domain": "admin.google.com",
        "purposes": [
          "Used in operational functionality for managing customer engagement with partners. Data elements: health data, sensitive demographic data."
        ],
        "locations": [
          "Operations"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "hex",
      "evidence_id": 250197,
      "data": {
        "name": "Hex",
        "domain": "hex.tech",
        "purposes": [
          "Used to monitor and analyze user events and engagement. Data elements: all end user data."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "hightouch",
      "evidence_id": 250197,
      "data": {
        "name": "Hightouch",
        "domain": "hightouch.com",
        "purposes": [
          "Used to analyze B2C user signups for paid acquired users. Data elements: signup date, email, user ID, user engagement data."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "intouchcx",
      "evidence_id": 250197,
      "data": {
        "name": "IntouchCX",
        "domain": "intouchcx.com",
        "purposes": [
          "Supports operations for phone, email, and chat support. Data elements: all data necessary for troubleshooting and debugging (name, email, phone number, language preference, subscription, etc.) and for payments and refunds (card information, name, email, etc.)."
        ],
        "locations": [
          "Customer support"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "iterable",
      "evidence_id": 250197,
      "data": {
        "name": "Iterable",
        "domain": "iterable.com",
        "purposes": [
          "Supports customer email communications. Data elements: user ID, name, email, phone number, access code, conversions and add-ons, demographic and geolocation data, survey answers, in-app engagement data, device data."
        ],
        "locations": [
          "Communications"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "google-cloud",
      "evidence_id": 250197,
      "data": {
        "name": "Looker",
        "domain": "cloud.google.com",
        "purposes": [
          "Used to monitor and analyze user events and engagement. Data elements: all end user data."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "MD Integrations",
        "domain": "mdintegrations.com",
        "purposes": [
          "Provides clinical services (MDI). Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight."
        ],
        "locations": [
          "Clinical vendor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "mixpanel",
      "evidence_id": 250197,
      "data": {
        "name": "Mixpanel",
        "domain": "mixpanel.com",
        "purposes": [
          "Used to monitor and analyze user events and engagement. Data elements: all end user data."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "openai",
      "evidence_id": 250197,
      "data": {
        "name": "OpenAI",
        "domain": "openai.com",
        "purposes": [
          "Chatbot. Data elements: message content."
        ],
        "locations": [
          "Customer support"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "OptioRx",
        "domain": "optiorx.com",
        "purposes": [
          "Provides pharmacy and fulfillment services (Optio). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location."
        ],
        "locations": [
          "Pharmacy vendor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "maestroqa",
      "evidence_id": 250197,
      "data": {
        "name": "RippIT (MaestroQA)",
        "domain": "maestroqa.com",
        "purposes": [
          "Used to monitor and analyze member chat engagement and provide AI-based solutions for improvement opportunities and classifying support and coaching interactions. Data elements: user name, user email, chat conversations, user’s current application state."
        ],
        "locations": [
          "Customer service"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "sendbird",
      "evidence_id": 250197,
      "data": {
        "name": "Sendbird",
        "domain": "sendbird.com",
        "purposes": [
          "Chatbot. Data elements: user ID, email, chat conversations."
        ],
        "locations": [
          "Communications"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "sentry",
      "evidence_id": 250197,
      "data": {
        "name": "Sentry",
        "domain": "sentry.io",
        "purposes": [
          "Used by engineering to support debugging. Data elements: user ID, geolocation, engagement, failed request details and error logs, 3P cookies."
        ],
        "locations": [
          "Debugging"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "Singular",
        "domain": "singular.net",
        "purposes": [
          "Used to monitor and analyze user events and engagement. Data elements: GAID, IDFV/IDFA, OS version, device model, IP address, geolocation data, conversions, retention, in-app engagement data."
        ],
        "locations": [
          "Data analytics"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "slack",
      "evidence_id": 9235,
      "data": {
        "name": "Slack",
        "domain": "slack.com"
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "SteadyMD",
        "domain": "steadymd.com",
        "purposes": [
          "Provides clinical services. Data elements: passthrough of all user clinical intake data: BMI, conditions, risk stratification, PHI, member ID, height, weight."
        ],
        "locations": [
          "Clinical vendor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "stripe",
      "evidence_id": 250197,
      "data": {
        "name": "Stripe",
        "domain": "stripe.com",
        "purposes": [
          "Supports collecting payment from members. Data elements: user name, email, address, and payment information."
        ],
        "locations": [
          "Payment processor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "TMC Acquisition, LLC",
        "domain": "tailormadecompounding.com",
        "purposes": [
          "Provides pharmacy and fulfillment services (TMC). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location."
        ],
        "locations": [
          "Pharmacy vendor"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 250197,
      "data": {
        "name": "Waltz Health, Inc.",
        "domain": "waltzhealth.com",
        "purposes": [
          "Pharmacy-benefit and fulfillment orchestration service; pharmacy hub for SmartRx (Waltz Health / Bolero Pharmacy). Data elements: standard Rx details, member eligibility, routing locations; name, DOB, address, medical conditions, medication, pharmacy location."
        ],
        "locations": [
          "Pharmacy benefit / fulfillment partner"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "zendesk",
      "evidence_id": 250197,
      "data": {
        "name": "Zendesk",
        "domain": "zendesk.com",
        "purposes": [
          "Used for direct conversations with customers and agentic resolutions. Data elements: email address, phone number, message content, sponsor (if applicable), IP address, location, purchased products, device type, application version, promotional codes applied."
        ],
        "locations": [
          "Customer support"
        ]
      }
    }
  ]
}