← Hippo

Subprocessors

Last updated: 2026-04-14

A "subprocessor" is a third-party service Hippo uses to deliver the product. This page lists all of them. We will notify customers in-app 30 days before adding a new subprocessor that processes personal data.

VendorPurposeData processedRegion
Supabase (Postgres + Storage + Auth)Primary database, file storage, authenticationAll account and training dataCanada (Central) — ca-central-1
VercelApplication hosting + edge networkRequest metadata, logsGlobal edge; primary US
Groq (Llama 3.3 70B)AI brief, dictation refinement, debrief parsing, PHI preflight, feed draftsDe-identified free-text you submit to AI features (regex-scrubbed server-side before transmission). Groq's commercial terms forbid using inputs/outputs for model training.US
Anthropic (Claude) — optional fallbackAI features when Groq is unavailableSame as Groq. Anthropic's API commercial terms forbid training on API inputs.US
OpenAI (Whisper)Speech-to-text for voice loggingAudio clips you recordUS
StripePayment processing for Pro subscriptionsEmail, billing address, payment card data (held by Stripe, not Hippo)Global
ResendTransactional email (attending sign-off links, password resets)Email addresses, email bodiesUS

For institutional plans requiring regional data residency (e.g. Canadian data in Canada), contact sales@hippomedicine.com.