PinBallCo LLC (dba PharmacyAI) uses a small number of third-party service providers to deliver and support the PharmacyAI service. A subprocessor is a vendor that processes Customer Data on our behalf under our Master Services Agreement and Data Processing Addendum. This page lists every subprocessor currently in use, what it does for us, and what data reaches it.
How we handle patient data
PharmacyAI is built on a local-PHI architecture. Protected health information is processed on the pharmacy's own workstation, inside the pharmacy's management system, and is not stored in PharmacyAI's cloud environment. Diagnostic logs and telemetry are scrubbed of patient identifiers on the device before transmission, and the log destination is covered by a signed Business Associate Addendum. No subprocessor on this list receives patient records.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Cloud hosting for application services, software distribution, and diagnostic logs | Account, configuration and operational data; de-identified diagnostic logs and telemetry. Covered by a Business Associate Addendum. | United States |
| Cloudflare | DNS, content delivery, and network security | Network traffic metadata and IP addresses | United States |
| Anthropic | AI model processing (Claude) for the intelligence layer | Content submitted for AI-assisted processing, such as prescription instruction text. No patient identifiers. | United States |
| Google Workspace | Company email, documents, and support correspondence | Business contact information and support communications | United States |
| HubSpot | Customer relationship management, support desk, email, and website | Pharmacy and staff contact information, account and support records | United States |
| Stripe | Subscription billing and payment processing | Billing contact and payment information. Card data is handled by Stripe and never stored by PharmacyAI. | United States |
| BoldSign (Syncfusion) | Electronic signature for agreements | Signer name, email, and executed agreements | United States |
All subprocessors process data in the United States. We do not transfer Customer Data outside the United States.
Changes to this list
We update this page before a new subprocessor begins processing Customer Data. Customers who want written notice of changes can email notices@pharmacyai.com and we will add you to the notification list. Questions about any subprocessor can be sent to support@pharmacyai.com.