Is Smart Fields running on an Enterprise API with a BAA and/or DPA that prevents the need for each customer to get consent from each employee, patient, and parent before extracting employee data, patient data, student demographics, etc?