Protected Health Information is removed before the data is sent to the cloud application, with the exception of a number of indirect identifiers that are required for processing of the data. Further details and rationale are provided in the Instructions for Use.