Last updated: January 1, 2026
To provide our robust clinical SaaS platform, PsychSuite engages and utilizes specific third-party infrastructure and service providers known as subprocessors.
We evaluate the security and privacy practices of all subprocessors rigorously. For any subprocessor that has access to or processes Protected Health Information (PHI), we execute a downstream Business Associate Agreement (BAA) strictly binding them to HIPAA requirements.
Stay Updated
Customers may subscribe to notifications regarding additions or changes to this subprocessor list by emailing support@psychsuite.com.
| Subprocessor | Purpose | Data Processed | Location | BAA in Place |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, and storage infrastructure | Application Data, PHI | USA | Yes |
| Vercel | Managed frontend infrastructure and edge functions | Application Data, PHI | USA | Yes |
| Supabase / Neon | Managed database hosting | Application Data, PHI | USA | Yes |
| SendGrid | Transactional email delivery (e.g., patient notifications, password resets) | Email addresses, Notification content, PHI | USA | Yes |
| Twilio | SMS and voice messaging delivery | Phone numbers, Appointment reminders, PHI | USA | Yes |
| Sentry | Error monitoring and application logging | Technical logs, Anonymized usage, potential transient PHI | USA | Yes |
| Zendesk | CRM and customer support desk | Customer Admin Data, Support Tickets | USA | Yes |
| Google Analytics | Product analytics for the marketing website only | Marketing interactions (No PHI) | USA | No (PHI: No) |
| Stripe | Payment processing for clinic subscription billing | Clinic payment details (No PHI) | USA | No (PHI: No) |
* Note: The vendor names listed above are illustrative examples for this clinical SaaS template. Clinic operators must replace these placeholders with their actual authorized vendor list prior to publishing.