Legal

Subprocessors

Third parties that process Customer Data on PharmacyAI's behalf.

Last Updated: October 16, 2026

PinBallCo LLC (dba PharmacyAI) uses a small number of third-party service providers to deliver and support the PharmacyAI service. A subprocessor is a vendor that processes Customer Data on our behalf under our Master Services Agreement and Data Processing Addendum. This page lists every subprocessor currently in use, what it does for us, and what data reaches it.

How we handle patient data

PharmacyAI is built on a local-PHI architecture. Protected health information is processed on the pharmacy's own workstation, inside the pharmacy's management system, and is not stored in PharmacyAI's cloud environment. Diagnostic logs and telemetry are scrubbed of patient identifiers on the device before transmission, and the log destination is covered by a signed Business Associate Addendum. No subprocessor on this list receives patient records.

Current subprocessors

Subprocessor

Purpose

Data processed

Location

Amazon Web Services

Cloud hosting for application services, software distribution, and diagnostic logs

Account, configuration and operational data; de-identified diagnostic logs and telemetry. Covered by a Business Associate Addendum.

United States

Cloudflare

DNS, content delivery, and network security

Network traffic metadata and IP addresses

United States

Anthropic

AI model processing (Claude) for the intelligence layer

Content submitted for AI-assisted processing, such as prescription instruction text. No patient identifiers.

United States

Google Workspace

Company email, documents, and support correspondence

Business contact information and support communications

United States

HubSpot

Customer relationship management, support desk, email, and website

Pharmacy and staff contact information, account and support records

United States

Stripe

Subscription billing and payment processing

Billing contact and payment information. Card data is handled by Stripe and never stored by PharmacyAI.

United States

BoldSign (Syncfusion)

Electronic signature for agreements

Signer name, email, and executed agreements

United States

All subprocessors process data in the United States. We do not transfer Customer Data outside the United States.

Changes to this list

We update this page before a new subprocessor begins processing Customer Data. Customers who want written notice of changes can email notices@pharmacyai.com and we will add you to the notification list. Questions about any subprocessor can be sent to support@pharmacyai.com.