Subprocessors
Last updated October 3, 2026
Credential Network uses the third parties below to deliver the Credential Network platform. Each one processes Customer Data only to provide its service to us, is bound by a written agreement that carries our Business Associate Agreement obligations, and is covered by our SOC 2 and HIPAA programs.
We post changes here within thirty (30) days of engaging a new subprocessor, as Section 7 of the Business Associate Agreement requires. Vendors that never receive Customer Data, such as our marketing, support and billing tools, are not listed.
| Subprocessor | Purpose | Data processed | Location | Agreement |
|---|---|---|---|---|
| Google Cloud Platform Google LLC | Cloud infrastructure for the Credential Network platform: compute, storage, networking, and the Gemini models behind CredAssist, used through Google Cloud with no training on customer data. | Customer Data, including protected health information | United States | Business Associate Agreement |
| MongoDB Atlas MongoDB, Inc. | Managed database for platform records. | Customer Data, including protected health information | United States | Business Associate Agreement |
| Vercel Vercel Inc. | Hosting and delivery of the web application front end and the credentialnetwork.com website. | Application traffic in transit and account metadata | United States | Business Associate Agreement |
Questions about a subprocessor, or a security concern? Email security@credentialnetwork.com. Contract notices go to legal@credentialnetwork.com, as the Business Associate Agreement provides.