Subprocessors
Current as of July 3, 2026
To provide the Savvy Health healthcare services, Swipe Savvy, Inc. engages the subprocessors listed below. We require subprocessors that create, receive, maintain, or transmit Protected Health Information ("PHI") on our behalf to enter into written agreements with privacy, security, and Business Associate Agreement flow-down obligations. All processing is within the United States; the Savvy Health services are offered in the United States only. See our Healthcare Privacy Notice and Business Associate Agreement for more detail.
| Subprocessor | Purpose | Data categories | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, storage, compute, database, and CDN | PHI, Consumer Health Data, account data, application data | United States |
| Amazon Bedrock | AI / LLM inference for AI-assisted workflow features (all outputs require clinician review) | Content submitted to AI features; not used to train foundation models | United States |
| SMS provider | SMS delivery for patient reminders, verification codes, and notifications | Phone numbers, message content, appointment/notification metadata | United States |
| Email provider | Transactional and patient-communication email delivery | Email addresses, message content | United States |
| Availity | Healthcare clearinghouse for claims, eligibility, and ERA/EOB transactions | Claims data, eligibility data, patient and payer identifiers | United States |
| Phaxio | Inbound and outbound fax transmission for clinical and administrative documents | Fax content, which may include PHI | United States |
| Payment processor | Payment card processing for copays, retail, memberships, and services | Tokenized payment data, transaction metadata (processed under PCI DSS) | United States |
| VitalPending BAA — no production PHI is transmitted to this vendor until a subcontractor BAA is executed. | Laboratory integration — lab ordering and result retrieval workflows | Lab orders, lab results, and associated patient identifiers | United States |
| Transcription provider | Speech-to-text transcription supporting documentation features (outputs require clinician review) | Audio and resulting transcription text, which may include PHI | United States |
Offshore Support Access
In addition to the subprocessors above, Swipe Savvy may use trained support, engineering, customer-service, and technical personnel located outside the United States, including in the Philippines, to access data for support, maintenance, troubleshooting, implementation, and security purposes. Such access is subject to confidentiality obligations, minimum-necessary restrictions, access controls, logging, and training. Unless otherwise agreed in a signed order form, production PHI is hosted in the United States, though remote access from outside the United States may occur.
Changes and Contact
We will provide commercially reasonable notice of material changes to PHI-handling subprocessors where required by the applicable agreement or law. Questions may be directed to privacy@swipesavvy.com.