Subprocessors
Last updated: September 8, 2026
Effective date: September 8, 2026
A “subprocessor” is a third-party service provider that Crebral Health (CREBRAL AI, LLC) engages to process data on its behalf in order to deliver the Services. We use a limited set of vetted subprocessors under written agreements that require them to protect data consistent with our obligations under the Privacy Policy. Where a subprocessor may create, receive, maintain, or transmit Protected Health Information (PHI), it is engaged under a HIPAA Business Associate Agreement, as described in our Business Associate Agreement.
Current subprocessors
Purpose: AI model inference for every clinical AI feature on the platform: visit note drafting from the scribe transcript, coding and documentation suggestions, claim audits and appeal drafts, the Ask Sasha assistant, insurance card reading, clinical document extraction, patient message triage, and the program generation engine.
Data processed: The text and images each feature needs, which can include PHI: transcript text (never audio), chart facts such as problems, medications, allergies and labs, claim details, insurance card images, uploaded clinical documents, and patient messages. Processed under a Business Associate Agreement. Inference is pinned to the United States. Inputs are not used to train models.
Processing region: United States
Purpose: Application database, authentication, and file storage.
Data processed: Account data, practitioner credentials, application data, and uploaded files, including PHI, under a Business Associate Agreement.
Processing region: United States
Purpose: Clearinghouse for insurance claims, eligibility checks, claim status, and remittances.
Data processed: Claim, eligibility and remittance transactions, which contain patient demographics, coverage details, diagnoses and procedure codes. Processed under a Business Associate Agreement.
Processing region: United States
Purpose: Text embeddings for evidence retrieval in the program generation engine.
Data processed: Short de-identified search terms only: biomarker names, medication names and condition terms. No patient names, identifiers, dates or free text are sent. Used by longevity and wellness programs; the scribe and billing features do not use it.
Processing region: United States
Purpose: Payment processing and subscription billing.
Data processed: Billing contact details and payment-method information. Crebral Health does not store raw card numbers.
Processing region: United States
Purpose: In-clinic card payments for clinics that connect a Clover account.
Data processed: Payment amounts and payment-method information for front-desk transactions. Crebral Health does not store raw card numbers.
Processing region: United States
Purpose: Transactional email delivery: sign-in links, password resets, invitations and account notices.
Data processed: Recipient email address and the notice itself. Emails never contain clinical information.
Processing region: United States
Purpose: Application hosting, content delivery, and edge network.
Data processed: Technical and usage data, request metadata, and IP addresses.
Processing region: United States (global edge network)
Not on this list
Our evidence library is built from published research abstracts, which are public and contain no patient data. Several AI providers help classify those abstracts during ingest. They never receive account data, chart data or PHI, so they are not subprocessors. The search index that holds the evidence library runs on infrastructure we operate ourselves.
Changes to this list
We may add or replace subprocessors as our Services evolve. When we do, we will update this page and, for material changes affecting the processing of PHI or personal data, provide advance notice to affected customers as required by the applicable agreement. Customers who have a BAA or data processing agreement in place may object to a new subprocessor as provided in that agreement.
Contact
Questions about our subprocessors? Contact us at:
Email: team@Crebral.ai
Mailing Address: CREBRAL AI, LLC, 1923 Trade Center Way, Suite 2, Naples, FL 34109