Subprocessors
The companies that handle data for us, what each does, and what each can see.
Where your patients' data goes.
Everything that holds patient information stays inside one AWS boundary, under its BAA. Two services sit outside it and see none.
Your clinic
Staff in the browser, and patients on their secure page.
Your EHR
Read only. Epic, Oracle Health or athenahealth.
Amazon Web Services, under its BAA1
Database
Cases, charts and the audit log, on RDS.
Files
Documents and exports, on S3.
Email and texts
Messages to staff and patients, sent through AWS.
AI
Triage and drafts on Amazon Bedrock, running Claude by Anthropic.2
Sentry, outside
Error details, with patient information removed first.
Have I Been Pwned, outside
Five characters of a new password's hash.3
Amazon Web Services
- What it does
- Hosting, the database, file storage, email, text messages, and AI through Amazon Bedrock
- What it can see
- Everything the product holds, including patient information
- Patient information
- Only once its BAA with us is signed
Anthropic
- What it does
- The Claude models behind triage suggestions and drafts, run inside Amazon Bedrock
- What it can see
- None directly. Requests stay in Amazon Bedrock, which doesn't share them with model providers
- Patient information
- Never directly. Only through Amazon Bedrock, under the AWS BAA
Sentry
- What it does
- Error reports from the product
- What it can see
- Technical details of an error, with patient information removed before it is sent
- Patient information
- Only once its BAA with us is signed
Have I Been Pwned
- What it does
- Checks a new staff password against known breaches
- What it can see
- The first five characters of the password's hash. No personal information
- Patient information
- Never
- 1AWS, HIPAA eligible servicesThe AWS services covered by the AWS business associate addendum.
- 2Amazon Bedrock FAQs, data privacyYour content is not used to improve the base models and is not shared with any model providers.
- 3Have I Been Pwned, searching passwords by rangeOnly the first five characters of a password's SHA-1 hash are sent; the password never is.
Last updated November 3, 2026
What this list is
A subprocessor is a company that handles data for us so we can run Anatomia. This list names each one, what it does and what it can see. A subprocessor handles patient information only once a business associate agreement with it is in place.
Where data is kept
Anatomia is built to keep patient information in Amazon Web Services, encrypted in transit and at rest. A clinic's admins can see the AWS region it runs in, and the AI provider in use, in their Trust Center. More is on our Security & HIPAA page.
When the list changes
We update this page before a new subprocessor starts handling data. We tell clinics directly at least 30 days before a new subprocessor handles patient information, so they can raise concerns.
Questions
Write to privacy@anatomia.health about this list, or to security@anatomia.health for a security review.