REFLEO HEALTH, INC.
Subprocessors
Refleo Health, Inc. uses the following subprocessors to provide the Refleo services. Each is bound by a written agreement that requires safeguards at least as protective as those in our Business Associate Agreement, prohibits using protected health information to train artificial intelligence models, and limits retention to what is necessary to provide the service.
| Subprocessor | Services used | Purpose | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Amazon Bedrock | Pre-session brief generation; the model runs inside AWS-controlled infrastructure and the model provider has no access to prompts or outputs | United States (us-east-1) |
| Amazon Transcribe | Speech-to-text for voice check-ins | ||
| Amazon Cognito | Sign-in and account security | ||
| Amazon SES | Transactional email: reminders, verification codes, executed copies of agreements | ||
| Amazon SNS | Push notification delivery | ||
| Amazon Aurora PostgreSQL | Encrypted database | ||
| Amazon S3 | Encrypted storage of voice recordings and executed agreements | ||
| Stripe, Inc. | Subscription billing | Subscription billing for clinician accounts; receives clinician name and email only, never patient information | United States |
Not subprocessors
Apple (push notification transport) receives device tokens and content-free notification payloads only.