Sub-processors

Application hosting and delivery

Data: All application traffic, including clinical content in transit

Primary database

Data: Account, client, note and audit-log records

File storage

Data: Uploaded client documents and files, treatment-plan images, agency logos, temporary full-record exports (deleted after a day) and audit-log integrity checkpoints

AI drafting, transcription and assistant features

Data: Session details you enter with the client's first name and relevant profile fields, dictation and session audio for transcription, and documents you submit to AI features

Transactional email (verification, invitations, reminders)

Data: Recipient names and email addresses, message content

Subscription billing and payments

Data: Billing contact and payment details — no clinical data

Aggregate site usage and performance analytics

Data: Page views and performance metrics; on signed-in pages, page addresses with record IDs and query strings removed — no clinical data

Website traffic analytics on public marketing pages only

Data: Page addresses and device information from public pages — never loaded inside the app, family portal or sign-in pages

Optional "Continue with Google" sign-in

Data: Name and email address from your Google account

Delivering browser and device notifications you turn on

Data: A generic reminder and a link into the app — no client information

Checking new passwords against known data breaches

Data: The first five characters of a password's SHA-1 hash — never the password itself or any clinical data