# Heidi Health

Heidi Health declares [10 subprocessors](https://thirdpartyindex.com/vendors/heidi-health#subprocessors) in [its subprocessor list](https://trust.heidihealth.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/219767)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [Microsoft](https://thirdpartyindex.com/vendors/microsoft). No published changes since we first read it on 2026-11-05.

Heidi Health (heidihealth.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/heidi-health
- Documents last verified: 2026-11-11
- Transparency rating: 90/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 10 tracked vendors directly, 86 within two hops, 331 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Heidi Health, Third Party Index, https://thirdpartyindex.com/vendors/heidi-health (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.heidihealth.com/ | 2026-11-11 | 2026-11-11 |
| Subprocessor list | https://trust.heidihealth.com/subprocessors | 2026-11-11 | 2026-11-05 |
| Data processing addendum | https://www.heidihealth.com/en-us/legal/data-processing-agreement | 2026-11-11 | 2026-11-09 |
| Privacy policy | https://www.heidihealth.com/en-us/legal/privacy-policy | 2026-11-11 | 2026-11-05 |
| Terms | https://www.heidihealth.com/en-us/legal/heidi-scribe-terms-of-use | 2026-11-11 | 2026-11-05 |
| security.txt | https://www.heidihealth.com/.well-known/security.txt | 2026-11-11 | 2026-11-05 |
| Status page | https://status.heidihealth.com/ | 2026-11-11 | 2026-11-05 |

## Subprocessors (10)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Provides on-demand cloud computing platforms and APIs. We utilise AWS for data storage and hosting facilities in certain regions such as US, Canada, EU, UK, Australia and Switzerland. | Cloud provider | 2026-11-05 |
| [Auth0](https://thirdpartyindex.com/vendors/okta.md) | Identity Management (No PHI) | Various (regionalised for users) | 2026-11-05 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Datadog is a cloud-based monitoring, security, and observability platform for infrastructure, applications, logs, and user experience | Observability monitoring (No PHI) | 2026-11-05 |
| [Google Cloud Platform (GCP)](https://thirdpartyindex.com/vendors/google-cloud.md) | Provides hosting and processing for many of our AI models | Cloud Storage and Processing | 2026-11-05 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Customer Engagement Platform | Customer Engagement Platform (No PHI) | 2026-11-05 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer support, workflow management | Customer support (No PHI) | 2026-11-05 |
| [Microsoft Azure](https://thirdpartyindex.com/vendors/microsoft.md) | Provides on-demand cloud computing platforms and APIs. We utilise Microsoft for data storage and hosting facilities in certain regions such as US, Japan, Australia, Sweden and UAE. | Cloud provider | 2026-11-05 |
| [MongoDB](https://thirdpartyindex.com/vendors/mongodb.md) | Data storage and processing; MongoDB is a cloud-based NoSQL database platform. At Heidi Health, it is used by the Engineering team to store, manage, and retrieve large volumes of structured and unstructured data that underpin Heidi's clinical documentation platform and core application functionality. | Regional | 2026-11-05 |
| [Omni Analytics](https://thirdpartyindex.com/vendors/omni.md) | Advanced usage analytics for customers | Data analytics (No PHI) | 2026-11-05 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment services provider (No PHI) | Finance and payments (No PHI) | 2026-11-05 |

Read from ([evidence](https://thirdpartyindex.com/evidence/219767)). CSV: https://thirdpartyindex.com/vendors/heidi-health/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001, ISO/IEC 42001, TX-RAMP, Cyber Essentials Plus ([evidence](https://thirdpartyindex.com/evidence/219768))
- Claimed: Cyber Essentials, HIPAA, GDPR, PIPEDA ([evidence](https://thirdpartyindex.com/evidence/219768))

## Subprocessor of (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 4 reported incidents (0 major or critical, 4 minor, 0 with no impact stated)
- Typical time to resolve: 4 h 29 min
- Status page last read: 2026-11-12
- 2026-11-09: Slow performance for some users in the US (minor)
- 2026-10-05: Degraded performance for users in Australia region (minor)
- 2026-09-28: Slower performance for some users in Southeast Asia (minor)
- 2026-08-19: Note generation service degradation to some Japan customers (minor)
- 2026-08-05: US Users unable to access application (critical)
- 2026-07-29: Some users can't connect to Heidi right now (major)
- 2026-06-09: Investigating login issues for some users (minor)
- 2026-06-09: Service degradation across Heidi platform (minor)

## Incidents reported by Heidi Health's subprocessors

Incidents reported in the last 30 days on their own status pages by 6 vendors Heidi Health lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Heidi Health lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Heidi Health lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Heidi Health lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Heidi Health lists as a subprocessor, reported Slow Fin Procedures (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Heidi Health lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-27: [Omni](https://thirdpartyindex.com/vendors/omni#status), which Heidi Health lists as a subprocessor, reported Slower page loading in US East (minor)
- 2026-10-27: [Omni](https://thirdpartyindex.com/vendors/omni#status), which Heidi Health lists as a subprocessor, reported Azure AI endpoints failing for customers hosted in Azure East US 2 (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Heidi Health lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Heidi Health lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Heidi Health lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Heidi Health lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [Omni](https://thirdpartyindex.com/vendors/omni#status), which Heidi Health lists as a subprocessor, reported Outage Detected (critical)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which Heidi Health lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Heidi Health lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor)
- 2026-10-14: [Omni](https://thirdpartyindex.com/vendors/omni#status), which Heidi Health lists as a subprocessor, reported Reports of Omni failing to load (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/heidi-health

## Security contact

From its security.txt (https://www.heidihealth.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/219754)):

- Contact: mailto:security@heidihealth.com
- Disclosure policy: https://heidihealth.com/legal/vulnerability-disclosure-policy
- Acknowledgments: https://heidihealth.com/legal/acknowledgments
- Languages: en
- Valid until 2027-03-25

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api