Subprocessors
Last updated: October 12, 2026
InboundAI365, LLC (“IB365”) uses the vendors below to run ib365.ai, the IB365 CRM, the Aveena AI receptionist, and the MyCare patient portal. For each vendor we list what it does, the data it receives, and its Business Associate Agreement (BAA) status for protected health information (PHI).
BAA status key: “Yes” means a signed BAA is on file. “In progress” means we are putting one in place. “Not used for PHI” means the vendor does not receive patient health information. “Contact us for current BAA status” means we are confirming the current status; email privacy@ib365.ai and we will tell you before you share PHI with us.
| Vendor | Purpose | Data | BAA status |
|---|---|---|---|
| Vercel | Hosts ib365.ai, the MyCare patient portal, and the CRM web app | Website requests (IP address, approximate location, browser), patient portal pages, uploaded files | Contact us for current BAA status |
| Neon | PostgreSQL database | Practice, staff, and patient records (PHI); website request logs and analytics events | Contact us for current BAA status |
| Railway | Hosts the IB365 application API and cache | Practice, staff, and patient records (PHI) in transit and in cache | Contact us for current BAA status |
| Cloudflare (R2) | File storage | Documents and files uploaded to the CRM, which may include PHI | Contact us for current BAA status |
| Clerk | Staff sign-in for the CRM | Staff names, email addresses, sign-in credentials and sessions | Contact us for current BAA status |
| Stripe | Payments and billing | Customer billing contact and card details; no patient data | Not used for PHI |
| ElevenLabs | Voice AI for the Aveena receptionist and the website voice demo | Call audio, recordings, and transcripts (PHI on practice lines); voice demo audio | Contact us for current BAA status |
| Vonage | Phone numbers, call routing, and SMS | Phone numbers, call metadata, and text message content (PHI) | Contact us for current BAA status |
| SimpleTexting | SMS delivery for some practices | Phone numbers and text message content (PHI) | Contact us for current BAA status |
| Resend | Transactional email | Email addresses and email content (sign-in codes, notifications) | Contact us for current BAA status |
| Anthropic | AI language model for chat and voice features | Conversation text sent for processing (may include PHI) | Contact us for current BAA status |
| OpenAI | AI language model for some AI features | Text sent for processing (may include PHI) | Contact us for current BAA status |
| Google (Gemini) | AI document classification and extraction, and some chat features | Documents and text sent for processing (may include PHI) | Contact us for current BAA status |
| Amazon Web Services (WorkMail) | Practice email feature, where a practice uses it | Email messages for that practice | Contact us for current BAA status |
| Plausible Analytics | Cookieless website analytics on the ib365.ai homepage, only after you accept | Page views and referrers (no cookies, no cross-site profile) | Not used for PHI |
| Google Fonts | Web fonts on the ib365.ai homepage | Visitor IP address and browser information | Not used for PHI |
| esm.sh | Delivers the code library for the website voice demo when you start it | Visitor IP address and browser information | Not used for PHI |
Changes to this list
We update this page when we add or replace a vendor. Customers with a BAA can ask us at privacy@ib365.ai to be told about changes. How we use personal information is described in our Privacy Policy.
InboundAI365, LLC · 11344 Coloma Rd, Gold River, CA 95670 · (888) 252-3019