Every vendor that touches practice data.
A practice evaluating any platform should ask for this list by name. Most vendors will not have one ready, and the delay is itself informative.
Each row below was read from that vendor's own published documentation on the date in the header, not from memory and not from a sales conversation.
| Vendor | What it processes | Region | Business associate agreement |
|---|---|---|---|
| Twilio | Voice calls, SMS, and the practice's phone numbers | United States | Offers a Business Associate Addendum on its Security and Enterprise editions. Not available on lower editions. |
| Vapi | Call audio and transcripts, where AI answering is switched on | United States | Offers a BAA as a paid compliance add-on. Recordings and transcripts are stored either way; HIPAA mode changes where and who may read them. |
| Supabase | The practice database - patients, appointments, notes, cases | United States | Offers a BAA on its Team plan and above, and holds BAAs with its own subprocessors including AWS. |
| Anthropic | Call scoring and summarization | United States | Offers a BAA for its HIPAA-eligible services. Web search is excluded from that agreement and is not used on practice data. |
Named rather than implied.
Every line above is a statement about what the VENDOR offers. None of it is a claim that RootLogic holds a signed agreement with them today, because it does not. The chain is being executed ahead of the founding cohort, and RootLogic signs with practices once the entity is formed.
Two things are worth knowing about that. Every one of these agreements sits behind a paid tier or a paid add-on rather than a form, so the chain is a purchase and it is being priced. And a vendor that cannot sign at all does not get practice data, which is why this list is short.
Why this page exists before there is a customer
Publishing a subprocessor list is a commitment we are making before there is anyone to make it to. It gets longer as the product grows, and every addition is an edit to this page rather than a footnote somewhere else.