Companies / Peppy Health / Subprocessors
Peppy provides a global employee healthcare benefit giving access to specialist clinicians across life stages through an app. It serves employers and their employees.
Summarized from its homepage on 6 Nov 2026.
Aviation House, 125 Kingsway, London, England, WC2B 6NH, United Kingdom
Subprocessors of Peppy Health
Peppy Health declares 11 subprocessors, including AI providers OpenAI.
| Subprocessor | Purpose |
|---|---|
| CRM tool | |
| Cloud infrastructure provider | |
| Marketing | |
| Internal Collaboration Tool | |
| Data visualisation tool | |
| Event tracking | |
| Semble | Clinical consultation and prescriptions |
| Customer messaging platform | |
| Cloud monitoring | |
| User Questionaires |
1 more subprocessor
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about Peppy Health
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “HIPAA compliant Resources for HR & benefits leaders”The company's own statement of compliance. There is no official HIPAA certification or registry. | 13 Nov 2026Source |
| ISO 27001Company's statement | “ISO27001 c ertified since 2020”The company's own statement. We have not checked an accreditation registry. | 13 Nov 2026Source |
| SOC 2Company's statement | “SOC2 c ompliant HIPAA compliant”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 13 Nov 2026Source |
We last read its homepage on 13 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Peppy Health lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Peppy Health's full stack
Every vendor with its source and date, and an alert when Peppy Health adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call