Sub-processors
Last updated: 22 October 2026
Core patient records and consultation-audio backups are stored in Australia. This does not guarantee that every processing step stays in Australia. The table describes provider locations and unresolved AI Reception residency limits, including providers that handle patient information.
| Provider | What it does for Quicka Health | Patient health information | Where |
|---|---|---|---|
| Supabase | Database, sign-in, file storage and backups | Yes | Sydney, Australia |
| Vercel | Hosting for the web application | Yes | Sydney, Australia. Requests reach it through a global network. |
| Fly.io | Real-time audio relay and background processing | Yes | Sydney, Australia |
| Amazon Web Services | AI drafting and form filling; PMS template allocation and visit classification; AI Reception replies; email delivery | Yes | Sydney, Australia |
| Google Cloud | AI reading of uploaded documents and forms; exercise and marketing media | Yes | Sydney, Australia for patient information. Exercise and marketing media use global and United States locations. |
| Microsoft Azure | Speech transcription | Yes | Australia East (New South Wales) |
| Deepgram | Backup consultation transcription; AI Reception speech and Voice Agent orchestration | Yes | Australian speech endpoint. Voice Agent calls to Bedrock target Sydney, but their origin and residency, Voice Agent BAA coverage and model improvement opt-out remain unverified. |
| Daily | Telehealth video calls | Yes | Sydney, Australia |
| Telstra | SMS messages to patients | Yes | Australia |
| Twilio | Phone calls answered by the AI receptionist | Yes | AU1, Sydney. Account, number, billing and usage resources are global. Twilio does not guarantee that all data stays in the selected region. |
| Tyro Health | Health fund, Medicare and DVA claims | Yes | Australia |
| Wasabi | Storage for exercise videos and education handouts | No | Sydney, Australia |
| Stripe | Clinic billing and payments | No | United States and other countries |
| Meta | Advertising measurement when a clinic connects its ad account. Receives hashed (scrambled) email addresses and phone numbers only. | No | United States |
| Google Ads | Advertising measurement when a clinic connects its ad account. Receives hashed (scrambled) email addresses and phone numbers only. | No | United States |
| Perplexity | Clinical evidence questions scrubbed for known patient names, titled names, email, phone, labelled date of birth, Medicare and record or claim numbers; search visibility research. Scrubbing is not a guarantee that every identifying detail is removed. | Yes | United States, through Vercel's AI gateway |
| PubMed (US National Library of Medicine) | Clinical evidence questions with the same identifier scrub as Perplexity; clinical details can remain | Yes | United States |
| OpenAI | Exercise, email and marketing images; blank form template compilation and building by platform administrators only; search visibility research. Ordinary form filling uses Australian providers. | No | United States |
| Anthropic | Search visibility research | No | United States |
| Google Maps Platform | Suburb lookup in search visibility tools | No | United States |
| DataForSEO | Search ranking research | No | European Union |
See our Privacy Policy for how we handle personal information, or email privacy@quicka.health.