Subprocessors
Last updated: June 17, 2026
NextChair uses a small set of vetted infrastructure providers to operate the service. Each subprocessor that may handle protected health information is bound by a Business Associate Agreement (or equivalent) and by confidentiality and security obligations consistent with HIPAA and PHIPA.
| Subprocessor | Purpose | Region | BAA |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, file storage, and email delivery | United States | Yes |
| Stripe | Billing and payments — receives billing counts only, never patient health information | United States | N/A (no PHI) |
Changes
We keep this list current. Material changes to our subprocessors will be communicated to account owners so they can meet their own notification obligations.