Subprocessors
Every outside company that touches your data, what it does, whether it can reach health information, and whether we have a signed agreement covering it. If a vendor is not on this list, it does not hold your data.
Why this page exists. When an agency evaluates a software vendor, one of the first real questions is “who else ends up holding our data?” Most vendors answer that only after you are deep in procurement, if at all. We would rather you could check before you talk to us.
Companies that process customer data
| Company | What it does for us | Health info? | Agreement | Where |
|---|---|---|---|---|
| Supabase | The database, sign-in, file storage, and live updates. This is where your records actually live. | Yes | Business Associate Agreement signed 20 May 2026, on their HIPAA tier | United States |
| Vercel | Serves the website and the app’s program files to your browser. | No | Not required — no records are stored here. Vercel delivers the app; your data goes straight from your browser to Supabase. | United States |
| Google Workspace | Our own business email, documents, and records archive. Used to correspond with you, not to run the portal. | Incidental only | Business Associate Agreement signed 12 May 2026 | United States |
Companies that do not touch customer data
Listed for completeness, because “we use no one else” is rarely true and we would rather show the whole picture. None of these can reach your records.
| Company | What it does for us | Customer data? |
|---|---|---|
| Porkbun | Registers our domain names. | None |
| Mercury | Our business bank account. | None |
| Coalition | Our cyber and professional liability insurance. | None |
What we deliberately do not use
We run no third-party analytics, advertising trackers, session recording, or external error-monitoring service against the portal. There is no outside company watching your staff use the software. If we ever add error monitoring, it will be behind a signed agreement with health information stripped before anything leaves the browser — and this page will say so first.
Changes
We update this page before a new subprocessor starts handling customer data, not after. Customers are told in the portal when the list changes. If you would like advance notice by email, write to privacy@lanterlink.com and we will add you.
Lanterlink LLC · Built in California, for California providers.