Last updated October 27, 2026.
Subprocessors.
SyncedUp Therapy is run by SyncedUp Therapy LLC. These are the outside services we use, what each one does, and whether it can see your clients' records. Our business associate agreement points to this list. Every service that stores or carries client records has signed a business associate agreement with us; an optional feature that uses a service without one is marked below and runs only when a practice chooses it.
Services that handle client records
- Amazon Web Services. Stores the database, sign-in and client files, with encrypted backups and a second copy in another US region. For optional consented session audio, Amazon Transcribe creates a transcript and Amazon Bedrock prepares a clinician-reviewed note draft in the configured US region. Business associate agreement in place since October 8, 2026. (Handles client records)
- Vercel. Runs the SyncedUp Therapy app and its server. Business associate agreement in place since October 16, 2026. (Handles client records)
- Paubox. Sends email to clients: reminders, receipts, letters and portal links. Business associate agreement in place since October 16, 2026. (Handles client records)
Services used only when a practice turns them on
- Stedi. Checks insurance eligibility and sends claims, only when a practice turns on electronic claims. Business associate agreement in progress. Eligibility checks and electronic claims stay off until it is signed. (Only if the practice turns it on)
- Anthropic. Writes AI drafts of notes, treatment plans and message replies, only for clients whose signed AI consent the practice records. Business associate agreement requested, not yet signed. Until it is, the practice decides whether to use AI drafting, and the assistant does not accept questions that need client information. (Only if the practice turns it on)
Services that never receive client records
- Stripe. Takes card payments. No business associate agreement. HIPAA's payment processing exception covers it, and SyncedUp sends only what is needed to charge a card, never clinical details. (Never receives client records)
- Resend. Sends account email to practice staff, such as sign-in links and alerts, and practice newsletters to people who subscribe. No business associate agreement, so it is never used for client records or appointment details. (Never receives client records)
- Twilio. Texts invitations to video test rooms. No business associate agreement, so it is never used for client messages. (Never receives client records)
- Google. Makes marketing images in the Content studio. The idea text is checked for client details before anything is sent. No business associate agreement, so it is never sent client information. (Never receives client records)
Where records are kept
SyncedUp's own systems, the database, client files and backups, are in data centers in the United States, encrypted in transit and at rest.
Changes
We update this page when we add a service or an agreement changes. Questions: support@syncedupsolutions.com.