Public vendor inventory
Service Providers & Subprocessors
These are the external companies currently used to run, store, secure, authenticate, and manage subscriptions for the Giver’s Atlas application.The authenticated workspace has no advertising pixel, behavioral analytics, session replay, support widget, or AI integration.
Current inventory
Companies That May Process Service Data
| Provider | Service | Information | Purpose and contact |
|---|---|---|---|
| Microsoft Azure | Application hosting, managed PostgreSQL database, private object storage, network security, secrets management, registry, logging, and monitoring | Account, workspace, care, consent, request, security, and stored-file data submitted through the service; limited network and device information needed to deliver and protect requests | Run, store, secure, and deliver Giver’s Atlas. Provider privacy information. |
| Clerk | Account registration, sign-in, multi-factor authentication, session management, and invitation delivery | Account identifiers, email address, authentication factors and events, session information, and invitation metadata; not care-workspace content intentionally sent by Giver’s Atlas | Authenticate users, secure accounts, and deliver invitations. Provider privacy information. |
| Stripe | Hosted subscription checkout and customer portal, payment processing, invoices, subscription billing, and fraud prevention | Giver’s Atlas account-link identifier, selected plan and billing interval, subscription and customer identifiers, and billing status; contact, payment, and billing information entered directly into Stripe; not care-workspace content intentionally sent by Giver’s Atlas | Process and manage optional subscriptions through hosted Stripe services. Provider privacy information. |
Scope boundaries
What Is Not Currently a Subprocessor
- Invited family members and caregivers are workspace recipients governed by the Admin’s sharing choice and role controls; they are not service providers to Giver’s Atlas.
- Hospitals, employers, insurers, pharmacies, and clinicians do not currently receive information through a product integration.
- Giver’s Atlas does not currently send authenticated-workspace content to advertising, analytics, session-replay, support-chat, or AI vendors.
- Member and optional care-recipient profile photos use private Azure Blob Storage. Observation and incident images must be staged or illustrative, without real symptoms, injuries, or identifying information. They also use private Azure Blob Storage. Local filenames for new attachments are not retained or displayed. Do not upload real symptom, injury, or identifying observation photos, or general documents.
Notice updates
How We Explain Changes
We update this list and the Consumer Health Data Privacy Notice when service providers or the information they process change. Before a change introduces new health-data categories, purposes, or recipients, we explain the change and obtain any consent required by applicable law.
Questions about our providers or your information? Contact privacy@giversatlas.com.