Sub-processors
Every third party that processes customer data on our behalf. 30-day notice period for changes. Email dpo@hihumanai.com to subscribe to notifications.
This list is updated whenever a sub-processor is added, changed, or removed. The notice period for changes is 30 days — email dpo@hihumanai.com to be added to the notification list.
| Provider | Purpose | Data | Region | DPA |
|---|---|---|---|---|
| Microsoft Azure | Hosting (ACA, Postgres, Redis, Service Bus, Blob, Front Door) | All platform data | UK South | Signed |
| Speechmatics | Primary speech-to-text | Voice audio, transcripts | UK | Pending |
| Deepgram | Fallback speech-to-text | Voice audio, transcripts | US | Pending |
| Cartesia | Text-to-speech | Generated speech text | US | Pending |
| Anthropic | LLM (Claude) | PII-scrubbed conversation text | US | Pending |
| Groq | LLM hosting (Llama) | PII-scrubbed conversation text | US | Pending |
| OpenAI | LLM (GPT-4o) | PII-scrubbed conversation text | EU | Pending |
| Stripe | Payment processing | Card tokens, invoice data | EU | Signed |
| Bandwidth | Telephony, SMS, MFA | Phone numbers, SMS content | US | Pending |
| Mailgun | Email delivery | Email addresses, email content | EU | Pending |
| Twilio | SMS fallback | Phone numbers, SMS content | US | Pending |
| Dentally | PMS integration | Patient records, appointments | UK | Clinic's own DPA |
| DeltaPath | PBX telephony (self-hosted on our Azure VM) | Call routing | UK | N/A |
| LiveKit | WebRTC media (self-hosted on our Azure VM) | Voice audio | UK | N/A |
| GitHub | Source code + CI / CD | No patient data | US | Signed |
Subscribe to change notifications
Under GDPR Art. 28, we give customers 30 days' advance notice before adding a new sub-processor. To receive these notifications, email dpo@hihumanai.com with subject "Subscribe: Sub-processor notifications".