Sub-processors

Last updated September 30, 20261 min read

Stillpoint engages the following sub-processors to provide the service. Each receives only the data necessary for its function and is bound by data protection obligations equivalent to those in our Data Processing Agreement. Material changes to this list are posted here and emailed to practice owners at least 14 days before they take effect.

§1Core infrastructure

Amazon Web Services, Inc.United States, us-east-1

Application hosting, the application database including client health information, file storage, transactional email (Amazon SES), and AI language processing for clinical documentation via Amazon Bedrock.

Microsoft CorporationUnited States
Clinical audio transcription for the AI Scribe feature, processed through the Azure OpenAI Service under Microsoft’s HIPAA Business Associate Agreement.
Stripe, Inc.United States
Payment processing, invoicing, subscription billing, and payout accounts for practices. Stripe receives payment and billing details, never clinical information.
Stedi, Inc.United States
Healthcare data clearinghouse for insurance features: patient identifying information (name, date of birth, member ID) is transmitted to verify coverage and submit claims where a practice uses insurance billing.
Twilio Inc.United States

SMS delivery for appointment notifications. Message content is minimised and excludes clinical details.

Google LLCUnited States

Address autocomplete (Google Maps Platform) when a practice or client enters an address, and web fonts (Google Fonts) loaded on booking pages and hosted websites.

§2Integrations you choose to connect

Some features involve third parties only when a practice connects them, and only for the data those features require: Google (sign-in and calendar sync), Microsoft (Outlook calendar sync), and Meta (social publishing for connected Facebook or Instagram accounts). Disconnecting the integration stops the data flow.

§3Questions

Questions about this list, or objections to a change, reach us at help@withstillpoint.com.

Questions about the Sub-processors?

1581572 B.C. Ltd. d/b/a Stillpoint Technologies
PO Box 5121, Victoria PO 9, BC V8R 6N4, Canada
help@withstillpoint.com

History

  1. Removed OpenAI and AWS End User Messaging, which Stillpoint no longer uses, and listed Google (address autocomplete and web fonts) and Microsoft Outlook calendar sync, which were already in use.
  2. Published for practices in the United Kingdom, Australia, and New Zealand.

Related