Version: 1.1 · Effective date: 2026-09-24 · Review cadence: Annual, and before adding any subprocessor
Regulatory basis: HIPAA Business Associate requirements (45 CFR §164.308(b), §164.314(a), §164.502(e)); SOC 2 Vendor & Subprocessor Management
The third parties (subprocessors) that process customer data in the course of delivering Wellzesta's services. Customers may request the current list at any time.
| Subprocessor | Activity |
|---|---|
| Amazon | Wellzesta Skill for Amazon speakers |
| Elastic Cloud | Search, including the search index — hosted on Google Cloud |
| Filestack | Image and document storage and distribution |
| Google Cloud | Cloud hosting; database and database activity logging (Google Cloud SQL); the LLM (Google Gemini) used by the Zesty AI assistant; business intelligence (Google Looker); user analytics (Firebase), storage (Google Cloud Storage); |
| New Relic | Application performance monitoring |
| Sendgrid by Twilio | Email delivery |
| Sentry | Platform observability. |
| Vimeo | Video storage and distribution |
| Zendesk | Customer support and ticket tracking |