# DoseSpot DoseSpot declares [12 subprocessors](https://thirdpartyindex.com/vendors/dosespot#subprocessors) in [its subprocessor list](https://trust.dosespot.com/subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/255658)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Microsoft](https://thirdpartyindex.com/vendors/microsoft) and [Slack](https://thirdpartyindex.com/vendors/slack). The list last changed on 2026-11-11: 0 added, 0 removed, 1 changed. [2 tracked vendors](https://thirdpartyindex.com/vendors/dosespot#used-by) name DoseSpot as a subprocessor, including [CirrusMD](https://thirdpartyindex.com/vendors/cirrusmd) and [Medplum](https://thirdpartyindex.com/vendors/medplum). DoseSpot (dosespot.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/dosespot - Documents last verified: 2026-11-12 - Transparency rating: 76/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 6/7 (partial); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 10 tracked vendors directly, 84 within two hops, 344 within three; 2 tracked vendors rely on it directly, 2 within two hops, 2 within three - Cite as: DoseSpot, Third Party Index, https://thirdpartyindex.com/vendors/dosespot (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.dosespot.com/ | 2026-11-12 | 2026-11-12 | | Subprocessor list | https://trust.dosespot.com/subprocessors | 2026-11-12 | 2026-11-11 | | Privacy policy | https://dosespot.com/privacy-policy/ | 2026-11-12 | 2026-09-28 | | Security page | https://dosespot.com/security-savvy-in-healthcare-tech-ensuring-the-protection-of-soc-2-and-hitrust/ | 2026-11-12 | 2026-09-28 | | Status page | https://status.dosespot.com/posts/dashboard | 2026-11-12 | 2026-11-02 | ## Subprocessors (12) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon AWS](https://thirdpartyindex.com/vendors/amazon-web-services.md) | RxLink/Interra Connect and Arrive Network cloud hosting provider | Cloud provider | 2026-11-11 | | [Atlassian](https://thirdpartyindex.com/vendors/atlassian.md) | Work-tracking and project management collaboration tools | Collaboration | 2026-11-10 | | [Azure DevOps](https://thirdpartyindex.com/vendors/microsoft.md) | — | Collaboration, Project Management, and Code Repository | 2026-09-28 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Datadog provides comprehensive monitoring and security for our infrastructure, tracking components like custom metrics, serverless invocations, log events, and workload protection. This platform ensures we maintain deep visibility into our system health and performance through built-in features like anomaly detection, live processes, and infrastructure forecasting. | Cloud monitoring | 2026-11-10 | | [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | A platform designed to help businesses with inbound marketing, sales, customer service, and CRM (Customer Relationship Management). | Sales & Marketing | 2026-11-09 | | [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Provides cloud based hosting of both Dosespot and pVerify application. | Cloud Hosting Provider | 2026-09-28 | | [Office 365](https://thirdpartyindex.com/vendors/microsoft.md) | Microsoft 365 is a product family of productivity software, collaboration and cloud-based services owned by Microsoft. | Email, Chat, Cloud File Storage | 2026-09-28 | | [Paubox](https://thirdpartyindex.com/vendors/paubox.md) | HITRUST and HIPAA Certified Email Encryption Service | HITRUST and HIPAA Certified Email Encryption Service | 2026-09-28 | | [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | A Customer Relationship Management (CRM) platform used primarily to manage relationships with customers, prospects, and partners. | Sales & Client Support | 2026-09-28 | | [Slack](https://thirdpartyindex.com/vendors/slack.md) | Instant messaging program for internal company communications. | Collaboration | 2026-09-28 | | [Sumo Logic](https://thirdpartyindex.com/vendors/sumo-logic.md) | SIEM provider | Security | 2026-11-10 | | [Tableau](https://thirdpartyindex.com/vendors/tableau.md) | — | Data analytics | 2026-11-10 | Read from ([evidence](https://thirdpartyindex.com/evidence/255658)). CSV: https://thirdpartyindex.com/vendors/dosespot/subprocessors.csv ## Compliance As its trust center lists them. - Audited: SOC 2, HITRUST CSF ([evidence](https://thirdpartyindex.com/evidence/12593)) - Claimed: HIPAA ([evidence](https://thirdpartyindex.com/evidence/12593)) ## Web Technologies DoseSpot's homepage made 128 requests to 5 domains, and 2 services controlled by another company. Loaded on 2026-11-11 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 2 third parties by category: Tag managers 1 (Google Cloud); Cookie compliance 1 (Cookiebot). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (2) - Google Cloud: 8 requests to gstatic.com, fonts.googleapis.com, googletagmanager.com; Google Tag Manager - Cookiebot: 5 requests to cookiebot.com; Cookiebot 1 ### First party (1) - DoseSpot: 115 requests to dosespot.com; Cloudflare, DataTables 1.10.22, Divi 4.27.4, Easy Pie Chart, FitVids.JS, Genesis blocks, Google Font API, HSTS, HTTP/3, MediaElement.js 4.2.17, Moment.js 2.30.1, MySQL, Open Graph, PHP, Popper, Priority Hints, RSS, Swiper, Tippy.js, WP Engine, WordPress, Yoast SEO 28.8, jQuery 3.7.1, jQuery Migrate 3.4.1, jQuery UI 1.14.2 2 tracked companies loaded by the homepage are not in DoseSpot's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (2) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [CirrusMD](https://thirdpartyindex.com/vendors/cirrusmd.md): Electronic pharmacy and prescription ordering. - [Medplum](https://thirdpartyindex.com/vendors/medplum.md): DoseSpot provides an e-prescribing platform used to support electronic prescription workflows, including prescription transmission and related medication-manage… ## Service status Incidents it reported on its own status page. - Last 90 days: 2 reported incidents (0 major or critical, 1 minor, 1 with no impact stated) - Typical time to resolve: 34 min - Status page last read: 2026-11-12 - 2026-11-05: Update on New Software Incident: DoseSpot Intermittent Slowness, Approve & Send Functionality (minor) - 2026-10-22: Incident Resolved: PHP Vulnerability (php2shell) – No Impact Identified (no impact stated) - 2026-08-06: pVerify | Payer down notification 08/06/2026 (minor) ## Incidents reported by DoseSpot's subprocessors Incidents reported in the last 30 days on their own status pages by 4 vendors DoseSpot lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which DoseSpot lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-11-10: [Sumo Logic](https://thirdpartyindex.com/vendors/sumo-logic#status), which DoseSpot lists as a subprocessor, reported Problem with Cloud SIEM Processing in North America 2 (US2) (minor) - 2026-11-09: [Sumo Logic](https://thirdpartyindex.com/vendors/sumo-logic#status), which DoseSpot lists as a subprocessor, reported Problem with Cloud SIEM Processing in North America 2 (US2) (minor) - 2026-11-05: [Sumo Logic](https://thirdpartyindex.com/vendors/sumo-logic#status), which DoseSpot lists as a subprocessor, reported Problem with Cloud SIEM APIs in North America 2 (US2) (major) - 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which DoseSpot lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which DoseSpot lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which DoseSpot lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which DoseSpot lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated) - 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which DoseSpot lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated) - 2026-10-21: [Paubox](https://thirdpartyindex.com/vendors/paubox#status), which DoseSpot lists as a subprocessor, reported Customers reporting issue with MFA codes (minor) - 2026-10-16: [Sumo Logic](https://thirdpartyindex.com/vendors/sumo-logic#status), which DoseSpot lists as a subprocessor, reported Problem with Billing and Account Management in North America 1 (US1), North America 2 (US2), Europe 1 (EU), Europe 2 (DE) (minor) ## Recent changes Changes to its documents and subprocessor list since monitoring began. - 2026-11-11: Changed subprocessor: Amazon AWS (purpose: RxLink/Interra Connect cloud hosting provider → RxLink/Interra Connect and Arrive Network cloud hosting provider) ([evidence](https://thirdpartyindex.com/evidence/255658)) Feed: https://thirdpartyindex.com/vendors/dosespot/changes.atom The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/dosespot --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api