Medplum
Medplum declares 8 subprocessors in its subprocessor list, which we last checked on Oct 25, 2026 (evidence). They include Amazon Web Services, Google Cloud and Salesforce. No published changes since we first read it on Oct 12, 2026.
Not listed by any tracked vendor.
Not loaded by any published homepage.
Subprocessors CSV of Medplum's subprocessors · Atom feed of Medplum's subprocessors DORA draft CSV of Medplum's subprocessors as declared by Medplum what's this? ·
8 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Cloud provider | ||
| D.A.W. Systems, Inc. | D.A.W. Systems provides ScriptSure Cloud ERX, an e-prescribing solution used to support prescription-related workflows. This subprocessor is used only when a customer enables the applicable e-prescribe integration.; Optional e-prescribing integration | United States | |
| Dosespot | DoseSpot provides an e-prescribing platform used to support electronic prescription workflows, including prescription transmission and related medication-management functionality. This subprocessor is used only when a customer enables the applicable e-prescribe integration.; Optional e-prescribing integration | United States | |
| Google Workspace | Identity provider | ||
| Health Gorilla, Inc. | Health Gorilla provides health data exchange, interoperability, and API infrastructure used to support lab ordering, lab results, and related clinical data workflows. This subprocessor is used only when a customer enables the applicable labs integration.; Optional labs integration | United States | |
| Salesforce | Sales | ||
| Snowflake Inc. | Cloud data warehouse and analytics infrastructure; Snowflake provides cloud data warehouse and analytics infrastructure used to store, query, process, and analyze customer data. This subprocessor applies to all customers. | United States | |
| Stedi, Inc. - Optional | Optional - Stedi provides healthcare clearinghouse and EDI services used to verify insurance eligibility, submit and process claims, check claim status, and receive remittance information. | United States |
Web TechnologiesCSV of Medplum's web technologies · Atom feed of Medplum's web technologies
Medplum's homepage made 75 requests to 9 domains, and 4 services controlled by another company.
4 third parties by category: Analytics 2Cookie compliance 1Other 1
3 tracked companies loaded by the homepage are not in Medplum's subprocessor list. A website can use a service without it processing customer data.
ComplianceCSV of Medplum's compliance · Atom feed of Medplum's compliance
- Certified
- Says it complies with
Certifications as Medplum's trust center lists them; reports are usually shared on request (evidence)
Incidents reported by Medplum's subprocessorsCSV of incidents reported by vendors Medplum lists · Atom feed of incidents reported by vendors Medplum lists
9 reported incidents in the last 30 days, by 2 of the vendors Medplum lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Medplum was involved.
| Date | Company | Incident | Impact | Lasted |
|---|---|---|---|---|
| | Incident Resolved: PHP Vulnerability (php2shell) – No Impact Identified | no impact stated | — | |
| | INC20000301 | critical | 5 h 3 min | |
| | INC20000299 | minor | 50 min | |
| | INC20000294 | critical | 8 h 52 min | |
| | INC20000290 | minor | 44 min | |
| | INC20000287 | critical | 29 min | |
| | INC20000277 | minor | 2 days | |
| | INC20000263 | major | 1 h 13 min | |
| | INC20000239 | critical | 1 h |
ChangesCSV of Medplum's changes · Atom feed of Medplum's changes
See the list as we read it on any date: Time machine
None since tracking began.
Rating badge for Medplum's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/medplum"><img src="https://thirdpartyindex.com/badge/medplum.svg" alt="Medplum transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/medplum)