Legal

Subprocessors

The service providers that process customer data for RunPractice, what each one does, and where patient data is kept.

Last updated October 6, 2026 · 1 min read

The short version

  • These companies process customer data, including protected health information, so that we can provide the Services.
  • We store and process protected health information in the United States.
  • Before we add or replace a subprocessor, we give customers at least 30 days’ notice, as our Data Processing Addendum describes.

1 Current subprocessors

RunPractice uses these subprocessors to provide the Services:

VendorWhat it does
SupabaseDatabase and hosting
WherebyTelehealth video
OpenAIAI models
StripePayments
Retell AICalls and texts

They work under contracts that limit how they may use the information and, for protected health information, under business associate agreements where required.

2 Where data is processed

We store and process protected health information in the United States.

3 Changes and contact

We update this page when we add or replace a subprocessor and change the date at the top. Under our Data Processing Addendum, customers get at least 30 days’ notice first and may object on reasonable data protection grounds. Questions: [email protected]. See also our Privacy Policy.

Questions about this document?

Email us at [email protected]. We’re happy to walk you through it.