Subprocessors

Trinity Wellness, LLC d/b/a Ordeva uses carefully selected subprocessors to operate the Ordeva website and, where applicable, the Ordeva platform. This page describes how we approach subprocessors for HIPAA-covered workflows and website operations.

Platform PHI Subprocessors

When Ordeva processes protected health information for a HIPAA-covered clinic, Trinity Wellness, LLC acts as a business associate. Subprocessors that may access PHI are engaged under appropriate contractual safeguards and are disclosed to the covered clinic as required by the applicable Business Associate Agreement and customer agreement.

A signed BAA and completed production-security review are required before Ordeva processes PHI for a covered clinic. Current or prospective clinic customers may request the then-current list of PHI subprocessors by contacting privacy@ordeva.org or legal@ordeva.org.

Website and Marketing Subprocessors

The marketing website at ordeva.org may use third-party services for hosting, form handling, communications, and analytics. These services process website visitor and business-inquiry data under this Site's Privacy Policy. Do not submit PHI through website forms.

Categories of website subprocessors may include:

• Website hosting and content delivery
• Demo-request form processing and email delivery
• Security, logging, and error monitoring
• Analytics used to improve the Site (where enabled)

For a current named list of website subprocessors, contact privacy@ordeva.org.

Updates

We may update subprocessors from time to time. Material changes affecting PHI processing for a covered clinic will be handled as required under the applicable BAA. This page will be updated when the public summary changes.