Treat
Subprocessors
Last updated
Treat Technologies LLC uses the third-party services below to deliver the Services. Each is engaged under a written agreement that limits its use of practice data to providing its service to Treat. Under our Business Associate Agreement, a subprocessor that creates, receives, maintains, or transmits protected health information on Treat's behalf must agree in writing to the same restrictions that apply to Treat.
Practices may also connect the Services to systems that are not subprocessors, such as their own practice-management system, e-mail, calendars, review platforms, and advertising accounts. Data sent to those systems goes at the practice's direction and is not covered by this list.
Subprocessors that may handle protected health information
| Subprocessor | Purpose | Data it may handle | Location |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | All practice data, including PHI | United States |
| Vercel | Application and website hosting | All practice data in transit and in logs, including PHI | United States |
| Netsapiens / Viirtue | Phone, text messaging, voicemail, and fax | Phone numbers, message content, call audio | United States |
| Deepgram | Call and voicemail transcription | Call audio and transcripts | United States |
| Anthropic | AI features (summaries, drafting, assistants) | Transcripts, messages, and practice data sent to AI features | United States |
| OpenAI | AI features (assistant, embeddings) | Practice data sent to AI features | United States |
| Resend | Transactional and practice e-mail delivery | Recipient e-mail addresses and message content | United States |
| Lob | Printed patient statements and mail | Patient name, mailing address, statement content | United States |
| Daily.co | Telehealth video | Live audio and video | United States |
| NexHealth | Practice-management system integration | Patient, appointment, and clinical records synchronized from the PMS | United States |
| DentalXchange | Insurance eligibility and claims clearinghouse | Patient, subscriber, and procedure information for claims and eligibility | United States |
| CardPointe (Fiserv) | Payment processing | Cardholder name, payment details (tokenized), amounts | United States |
| Stripe | Payment processing | Cardholder name, payment details (tokenized), amounts | United States |
| Cherry | Patient financing | Patient name, contact details, purchase amount, at the practice's direction | United States |
Other subprocessors
| Subprocessor | Purpose | Data it may handle | Location |
|---|---|---|---|
| Plaid | Practice bank-account connections for bookkeeping | Practice financial transactions (no patient data) | United States |
| Cloudflare | Bot protection on signup and quote forms | IP address and browser signals (no patient data) | United States |
| HubSpot | Sales CRM, quotes, and e-signature for practice agreements | Practice and prospect contact details, quote and signature records (no patient data) | United States |
We update this list when a subprocessor is added or replaced and give practices notice as the Business Associate Agreement provides. Questions: legal@alltreat.io