Default table – 2 columns – 600 width

Sub-processor Name Sub-processor Name	Purpose Of Processing
Amazon Web Services, Inc. max 248 mobile and manual max width desktop	Cloud Service Provider
Digital Ocean	Cloud Service Provider
SendGrid, Inc.	Email notification services
Stitch Data	Data processing
Zendesk	CRM services

Table – additions

Transitioning critical resources to the cloud, allowing employees access from off-premises, and Bring Your Own Device policies present networking and security challenges that Firewall as a Service is agile enough to address.

Cost Effectiveness	Cost Effectiveness	Cost Effectiveness
Cost Effectiveness	Cost Effectiveness	Cost Effectiveness
Cost Effectiveness	Cost Effectiveness	Cost Effectiveness

Default table

Sub-processor Name	Purpose Of Processing	Entity Country	Purpose Of Processing	Type Of Data Processed
Amazon Web Services, Inc.	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
Digital Ocean	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
SendGrid, Inc.	Email notification services	United States	Email notification services	All data specified in Annex I
Stitch Data	Data processing	United States	Data processing	All data specified in Annex I
Zendesk	CRM services	United States	CRM services	All data specified in Annex I

Hitrust vs HIPAA : What Are The Differences?

HIPAA Compliance Requirements	HITRUST Certification Requirements
Organizations are focused on complying with legal regulations.	HITRUST focuses on managing risk for comprehensive positive impacts on healthcare organizations.
No HIPAA certification process to demonstrate or ensure HIPAA compliance.	he certification process for HITRUST compliance.
HIPAA compliance does not ensure compliance with regulations such as NIST, SOC2, and PCI DSS.	HITRUST covers HIPAA, NIST, SOX, and PCI DSS.
No framework for risk assessment.	A comprehensive framework for risk assessment.
HIPAA compliance requires selecting security multiple controls.	HITRUST maps to the HIPAA Security Rule.
No annual certification process.	Annual HITRUST certification audit.
No frequent HIPAA updates.	HITRUST continuously re-evaluates risk management processes to protect against the latest threats.
Penalties for non-compliance.	No penalties for non-HITRUST certification.
HIPAA regulations can be complex.	HITRUST certification achieved through third-party auditors.
No single report for regulatory compliance requirements.	Run a single report for all regulatory compliance requirements.

Table with colored rows

Sub-processor Name	Purpose Of Processing	Entity Country	Purpose Of Processing	Type Of Data Processed
Amazon Web Services, Inc.	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
Digital Ocean	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
SendGrid, Inc.	Email notification services	United States	Email notification services	All data specified in Annex I
Stitch Data	Data processing	United States	Data processing	All data specified in Annex I
Zendesk	CRM services	United States	CRM services	All data specified in Annex I

Table with container BG color

Sub-processor Name	Purpose Of Processing	Entity Country	Purpose Of Processing	Type Of Data Processed
Amazon Web Services, Inc.	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
Digital Ocean	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
SendGrid, Inc.	Email notification services	United States	Email notification services	All data specified in Annex I
Stitch Data	Data processing	United States	Data processing	All data specified in Annex I
Zendesk	CRM services	United States	CRM services	All data specified in Annex I

Scroll Table

Sub-processor Name	Purpose Of Processing	Entity Country	Purpose Of Processing	Type Of Data Processed
Amazon Web Services, Inc.	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I
Digital Ocean	Cloud Service Provider	United States	Cloud Service Provider	All data specified in Annex I All data specified in Annex I
SendGrid, Inc.	Email notification services Email notification services	United States	Email notification services	All data specified in Annex I
Stitch Data	Data processing	United States	Data processing	All data specified in Annex I
Zendesk	CRM services	United States	CRM services	All data specified in Annex I