Subprocessors
Infrastructure providers and service partners used by Xophie to deliver our services.
Last Updated: February 4, 2026
About Our Subprocessors
Xophie uses carefully selected infrastructure providers and service partners (“subprocessors”) to deliver our AI-powered patient communication platform. Each subprocessor has been evaluated for security, reliability, and compliance capabilities.
This page provides transparency about which third-party services we use, where they are located, and what data they process on behalf of Xophie and our customers.
Current Subprocessors
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
LiveKit livekit.io | Real-time voice communication infrastructure for AI call handling | Call audio, real-time transcripts | United States |
Twilio twilio.com | Telephony services and SMS messaging | Phone numbers, SMS messages, call routing data | United States |
Supabase supabase.com | Database, authentication, and secure storage | User accounts, patient data, appointment records, call metadata | United States |
Amazon Web Services (AWS) aws.amazon.com | Cloud hosting infrastructure and compute resources | Application data, file storage, backups | United States |
PostHog posthog.com | Product analytics and usage monitoring | Anonymized usage data, feature analytics (no PHI) | United States |
OpenAI openai.com | AI language processing and conversation management | Call transcripts, conversation context | United States |
Security & Compliance Standards
All subprocessors listed above have been evaluated for:
- Industry-standard security controls (encryption, access management, monitoring)
- HIPAA eligibility for processing Protected Health Information (where applicable)
- SOC 2 Type II compliance or equivalent security certifications
- Data processing agreements and contractual protections
- Incident response and breach notification procedures
Data Residency
All customer data is currently processed and stored in United States-based infrastructure. We select subprocessors that provide data residency options and comply with applicable data protection regulations.
Changes to Subprocessors
Xophie may add, remove, or replace subprocessors as our technology evolves. Material changes to this list will be communicated to customers via:
- Email notification to account administrators
- Update to this page with a new “Last Updated” date
- In-app notifications for enterprise customers
Enterprise customers with specific subprocessor approval requirements should contact [email protected] to discuss custom notification procedures.
Questions About Subprocessors
For questions about our subprocessors, data processing agreements, or security practices:
Email: [email protected]
Security Team: [email protected]