TherapyCRM subprocessors
Current as of August 22, 2026. These providers support delivery of TherapyCRM. Locations describe known primary contracted processing and do not exclude transient routing or lawful provider support access. A location marked for verification is deliberately not a contractual location promise.
| Provider | Function | Processing location | Data categories |
|---|---|---|---|
| Hetzner Online GmbH | Application infrastructure | Germany | Application requests and data in transit |
| Neon, Inc. / Amazon Web Services | Managed PostgreSQL | United States | Account, practice, and client information |
| Redis Ltd. / Amazon Web Services | Session cache and rate limiting | Verify the configured service region before relying on a location commitment | Session identifiers and security metadata |
| Google Cloud | Private file storage | Verify the configured region in the platform publisher profile before relying on a location commitment | Uploaded clinical documents and media |
| Stripe, Inc. | Subscription billing and checkout | United States and global payment network | Practice billing contact and payment information |
| Twilio Inc. / SendGrid | Transactional email and SMS | United States | Recipient address or phone number and message content |
| OpenRouter, Inc. | AI model gateway | United States | Minimised or pseudonymised task text, including values a user deliberately supplies |
| Allowlisted AI model providers | AI model inference | United States | Minimised or pseudonymised task text under API no-training commitments |
Changes and questions
TherapyCRM gives advance notice of material subprocessor changes through registered-user email and an updated Privacy Policy where required. Contact privacy@therapycrm.io for contract, location, or transfer questions before placing regulated information in the Services.