Changes to this list
We update this page before a new sub-processor starts handling customer data. Agency customers who want to be told about changes can ask through the contact form.
Trust
Sub-processors
These are the third parties BxScribe uses to deliver the service and the data each one may process. “Pending” means a Business Associate Agreement with that vendor is not yet signed.
Last updated: September 24, 2026
Vercel
PendingApplication hosting and delivery
Data: All application traffic, including clinical content in transit
Neon (managed PostgreSQL)
PendingPrimary database
Data: Account, client, note and audit-log records
Amazon Web Services (S3)
PendingFile storage
Data: Uploaded client documents, session recordings and agency logos
OpenAI
PendingAI drafting, transcription and assistant features
Data: Session details and text you submit to AI features
Resend
PendingTransactional email (verification, invitations, reminders)
Data: Recipient names and email addresses, message content
Stripe
Not required (no PHI)Subscription billing and payments
Data: Billing contact and payment details — no clinical data
Vercel Analytics & Speed Insights
Not required (no PHI)Aggregate site usage and performance analytics
Data: Page views and performance metrics — no clinical data
Google Analytics
Not required (no PHI)Website traffic analytics
Data: Page addresses and device information — no clinical content
Google (sign-in)
Not required (no PHI)Optional "Continue with Google" sign-in
Data: Name and email address from your Google account