A subprocessor is a company that processes personal data on our behalf, under contract and on our instructions, in order to run Healthvocate. This page lists all of them. It is published because employers and their advisors reasonably want a single answer to the question, rather than a paragraph buried in a privacy policy.
This list is complete as of the date above. Our general Privacy Policy and our Consumer Health Data Privacy Policy describe the same relationships in the context of the rights you have over the data.
| Subprocessor | Function | What it receives |
|---|---|---|
| Anthropic, PBC United States |
AI analysis and reading of uploaded documents | No account identifier of any kind — no user ID, session ID, email address or customer number. Analyses carry only the facts a question needs: codes, amounts, provider specialty, state and ZIP, household size and income band. Uploaded documents are the one exception: reading a page means reading everything printed on it. |
| LyneHost / SupremeCluster United States |
Server infrastructure, database hosting, and outbound email delivery | Stores the database in which all account data resides, and delivers transactional email. A hosting provider necessarily has technical access to what it stores; access is restricted by policy and sensitive fields are encrypted at rest. |
| Stripe, Inc. United States |
Payment processing and affiliate payouts | Email address and payment details, entered directly into Stripe's hosted checkout. Receives no health data. We never see or store card numbers, CVV, or bank credentials. |
That is the entire list. Healthvocate has no corporate parent, subsidiaries, or affiliates, so there are none to disclose.
For completeness, Healthvocate makes outbound requests to a small number of external services that receive nothing that identifies you. They process no personal data on our behalf, so they are not subprocessors — but we would rather list them than have you discover a request you did not expect.
Several reference datasets — Medicare fee schedules, the ZIP-to-locality crosswalk, the federal exclusion list, and Social Security parameters — are imported in bulk and held on our own servers. Using them sends no request anywhere.
We do not sell personal data. We do not share it with advertisers or data brokers. We do not build user profiles for resale. No subprocessor above is permitted to use the data it receives for its own purposes; each is contractually limited to our instructions.
If your organization purchases seats, the list above is unchanged — buying seats does not insert your organization into the data path. An employer administrator can see seat count, membership, and billing. There is no employer view of any individual's activity, results, or uploads, and no organization identifier exists on any analysis record. It is a property of the data model, not a setting.
If we add or replace a subprocessor we will update this page and the date at the top. Organizations with active seat purchases that would like advance notice of changes can request it at support@healthvocate.com.
DYS Global Macro Trading Corp
support@healthvocate.com
← Back to Healthvocate · Privacy Policy · Consumer Health Data