HIPAA and BAAs — Exhibit A — scope of services
PHI may be stored and processed in: workspace records and field values, file attachments, and the revision, trash and audit history the Services keep of them, together with the hosted infrastructure (compute, database, file storage, backups) that serves them.