Tier 1 — Critical

CloudHealth Data Systems

Vendor ID: VND-001

Primary cloud platform for PHI storage and glucose monitoring data pipeline — HIPAA Business Associate.

Canonical URL: /vendors/cloudhealth-data-systems-vnd-001.html

Vendor ID: VND-001

Tier: 1 — Critical

BAA Status: Active — signed Jan 2024

SOC 2 Type II: 2025 report on file

Devices Served: VGP-200 (K231156), VID-100 (K220893)

Vendor Profile

Field	Value
Legal Name	CloudHealth Data Systems, Inc.
Headquarters	500 Cloud Way, Seattle, WA 98101
Primary Contact	Jennifer Walsh — j.walsh@cloudhealthdata.com
Contract Value (Annual)	$1,240,000
Contract Expiry	December 31, 2027
Data Processed	PHI — glucose readings, insulin logs, patient demographics
Hosting Regions	us-east-1, us-west-2 (AWS)
Sub-processors	Amazon Web Services, Datadog Inc.

CloudHealth Data Systems must maintain AES-256 encryption at rest and TLS 1.3 in transit for all Veridian PHI data per the executed BAA.

CloudHealth must provide Veridian with 90 days advance notice before adding any new sub-processor that will access Veridian PHI.

Annual SOC 2 Type II reports from CloudHealth must be reviewed by IT Security within 30 days of receipt.

Patient glucose data stored on CloudHealth infrastructure is classified as PHI and subject to HIPAA Security Rule administrative, physical, and technical safeguard requirements.

SLA & Performance Metrics (2025)

Metric	Target	Actual 2025	Status
Platform Uptime	99.95%	99.97%	Met
API Response Time (p95)	< 200ms	142ms	Met
Incident Notification	< 48 hours	100% compliance	Met
Backup Recovery Test	Quarterly	4/4 completed	Met