TEMPLATE DOCUMENTS — FOR PRODUCT AND DEMO PURPOSES ONLY. These documents have not been reviewed or finalized by qualified legal counsel. They MUST be reviewed, customized, and approved by a licensed attorney before use in any production environment or with real users. Nothing in these pages constitutes legal advice.

Subprocessors

Last updated: June 17, 2026

Effective date: June 17, 2026

A “subprocessor” is a third-party service provider that Crebral Health (CREBRAL AI, LLC) engages to process data on its behalf in order to deliver the Services. We use a limited set of vetted subprocessors under written agreements that require them to protect data consistent with our obligations under the Privacy Policy. Where a subprocessor may create, receive, maintain, or transmit Protected Health Information (PHI), it is engaged under a HIPAA Business Associate Agreement, as described in our Business Associate Agreement.

Current subprocessors

Anthropic, PBC

Purpose: AI model inference — powers the evidence-graded program-generation engine.

Data processed: Prompt inputs submitted for analysis, which may include biomarker data and, where a BAA applies, PHI.

Processing region: United States

Supabase, Inc.

Purpose: Application database, authentication, and file storage.

Data processed: Account data, practitioner credentials, application data, and uploaded files (including PHI under a BAA).

Processing region: United States

Stripe, Inc.

Purpose: Payment processing and subscription billing.

Data processed: Billing contact details and payment-method information. Crebral Health does not store raw card numbers.

Processing region: United States

Vercel, Inc.

Purpose: Application hosting, content delivery, and edge network.

Data processed: Technical and usage data, request metadata, and IP addresses.

Processing region: United States (global edge network)

Changes to this list

We may add or replace subprocessors as our Services evolve. When we do, we will update this page and, for material changes affecting the processing of PHI or personal data, provide advance notice to affected customers as required by the applicable agreement. Customers who have a BAA or data processing agreement in place may object to a new subprocessor as provided in that agreement.

Contact

Questions about our subprocessors? Contact us at:

Email: team@Crebral.ai

Mailing Address: CREBRAL AI, LLC, 1925 Trade Center Way, Suite 2, Naples, FL 34109