# HealthStream

HealthStream (healthstream.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/healthstream
- Documents last verified: 2026-10-07
- Transparency rating: 26/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 12/12; Trust center 0/8 (not found); Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Cite as: HealthStream, Third Party Index, https://thirdpartyindex.com/vendors/healthstream (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Data processing addendum | https://www.healthstream.com/dpa | 2026-10-07 | 2026-10-01 |
| Privacy policy | https://www.healthstream.com/privacy | 2026-10-07 | 2026-10-01 |
| Terms | https://www.healthstream.com/operational-pages/terms-of-use | 2026-10-07 | 2026-10-01 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Security program

What HEALTHSTREAM INC's Form 10-K for fiscal 2025, filed Feb 27, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1095565/000143774926005916/0001437749-26-005916-index.htm).

- Board oversight: Audit Committee
- Frameworks named: NIST CSF, HITRUST
- Practices named: Incident response plan, Cyber insurance
- Reviews its suppliers' security
- Says no cybersecurity incident has materially affected it

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api