Subprocessors
Last updated October 5, 2026
Hank AI, Inc. uses the third parties below to operate the Service. Each one processes information on our behalf under a written contract that limits it to providing services to us. This page is the current list. The Privacy Policy and section 5 of the Business Associate Agreement both refer to it.
We announce a change to this list by email to the contacts on file for each organization. Business customers may object to a new subprocessor on reasonable data-protection grounds by writing to [email protected].
The list
The PHI path column answers one question: can protected health information reach this provider? A provider marked Only if enabled sits behind a setting that is off by default. A provider marked Possible can receive content that a customer chooses to send it, and we cannot know in advance whether that content holds patient data.
| Subprocessor | Purpose | Data categories | Location | PHI path |
|---|---|---|---|---|
| Railway Corporation | Application hosting, managed PostgreSQL databases, and platform logs | All platform data at rest and in transit: account and identity records, usage and metering records, audit records, and the content customers submit to a service | United States (us-east4) | Yes |
| Cloudflare, Inc. | DNS, content delivery, TLS termination, web application firewall, bot challenge, page-view analytics, and object storage for HANK Scholar | Every request to a hank.ai address, including its IP address, headers, and body, while the connection is terminated at the edge; page-view analytics; stored source documents for HANK Scholar | Global edge network; United States origin. Object storage region per bucket settings; verified by the operator before PHI tiers open | Yes |
| OpenAI OpCo, LLC | Large-language-model inference and hosted vector search for HANK ARSE, Automated Medical Coding, MedicalNotes, Safe Harbor, Payer Policy Manager, Scholar, and Codesets | The content submitted to those services, including document page images and clinical text, and the text of a question you ask | United States | Yes |
| Anthropic PBC | Large-language-model inference for HANK Payer Policy Manager and HANK Scholar | The content submitted to those services and the text of a question you ask | United States | Yes |
| Google LLC (Gemini API and Vertex AI) | Hosted vector search over code descriptions for HANK Codesets, and an alternate model backend for HANK Scholar | Code-set reference text; the text of a question you ask | United States, or the Vertex AI region configured for a tenant | No |
| Google LLC (Sign in with Google) | Single sign-on for the console and for every HANK service | Your email address, your name, and your Google account identifier | Global (Google identity endpoints) | No |
| Voyage AI (a MongoDB, Inc. company) | Text embeddings and search-result reranking for HANK Scholar | Licensed reference-literature text, the text of a question you ask, and the candidate passages being ranked for it | United States (us-east) | No |
| Stripe, Inc. | Subscription billing, payment processing, invoicing, and usage metering | Your organization name, billing contact, plan, payment method, and invoice history. Hank never receives or stores your card number. | United States | No |
| Twilio Inc. (SendGrid) | Outbound notification email and inbound email ingestion for HANK Payer Policy Manager | Recipient email addresses, message content, delivery events, and the content of an email a customer forwards into the service | United States | Possible |
| Twilio Inc. (Programmable Messaging) | SMS alerts to Hank operations staff when a service is degraded | Service-status text sent to Hank staff phone numbers. No customer content. | United States | No |
| Superblock, LLC (Pushover) | Push alerts to Hank operations staff when a service is degraded | Service-status text sent to Hank staff devices. No customer content. | United States | No |
| Transactional email relay | Customer and organization notices | Recipient address, notice text. No customer content. | Not yet in use; this list is updated before a relay is configured. | No |
| Resend, Inc. | Notification email from the HANK documentation site | Subscriber email addresses and notification content. No customer content. | United States | No |
| Amazon Web Services, Inc. | Object storage for HANK Codesets reference data and storage of database credentials | Published code-set reference data and service credentials. No customer content. | Region per bucket settings; verified by the operator before PHI tiers open | Only if enabled |
| Firecrawl (Sideguide Technologies, Inc.) | Retrieval of public web pages: corpus ingestion for HANK Scholar, and checking a coding claim against a published authoritative source | Public web addresses and the search text sent to them. Claim text is scrubbed of patient-identifying content before any request, and the target hosts are a fixed allowlist. | United States | No |
| Microsoft Corporation (Azure AI Document Intelligence) | Optional cloud text recognition for HANK Safe Harbor | Rendered page images of a document being de-identified. Off by default: the standard path recognizes text on Hank's own compute and sends nothing. | The Azure region configured for the endpoint | Only if enabled |
| Hugging Face, Inc. | Download of machine-learning model files used on Hank's own compute | No customer data. Model files are fetched in one direction. | Global content-delivery network | No |
| GitHub, Inc. (a Microsoft company) | Source-code hosting and automated build and test pipelines | Hank's own source code and build artifacts. No customer data. | United States | No |
| Google LLC (YouTube, no-cookie mode) | Instructional videos embedded in the HANK documentation site | Nothing until you press play. The page shows a still image and loads the player only after you click it. | Global | No |
| Perplexity AI, Inc. | An internal Hank maintenance script that looks up missing procedure-code descriptions | Procedure-code numbers only. No customer data. The script is not part of any service a customer calls. | United States | No |
| Microsoft Corporation (Azure Kubernetes Service, Azure Files, Azure Container Registry) | Hosts the legacy HANK Claim Cleaner endpoint at claimcleaner.api.hank.ai | The claims sent to that endpoint, including patient and provider identifiers, and a cache of recent results | United States (Azure East US) | Yes |
Providers we do not use
Our code carries configuration for a few providers that no running service selects. They are not subprocessors, they receive nothing, and we list them here so that this page is complete rather than merely accurate: xAI, Groq, Azure OpenAI, Azure AI Document Intelligence in HANK MedicalNotes, Azure AI Document Intelligence in HANK ARSE, and Cohere. If we start to use one of them, it moves into the table above and we tell you first.
Questions
Write to [email protected]. For custom data-protection terms, or a Data Processing Addendum, write to [email protected].