Asellera Subprocessors

1. Overview

Asellera uses carefully selected third-party service providers (“subprocessors”) to support the delivery, security, and operation of its platform.

These subprocessors may process personal information and protected health information (PHI) strictly on behalf of Asellera and only for the purpose of providing services to healthcare providers using the platform.

All subprocessors are required to protect data through contractual confidentiality obligations and appropriate technical, administrative, and physical security measures. Where required, Asellera enters into Data Processing Agreements (DPAs) and Business Associate Agreements (BAAs) with subprocessors handling PHI.

2. Categories of Subprocessors

Asellera uses subprocessors in the following categories:

Cloud infrastructure providers are used to host application services, databases, and storage systems in a secure and scalable environment.

Database and backend service providers are used to manage structured application data, authentication systems, and API functionality.

Artificial intelligence and machine learning providers are used to enable natural language processing, transcription, and workflow automation features.

Communication providers are used to enable voice calling, SMS messaging, and patient communication workflows.

Workflow automation and orchestration tools are used to connect systems and execute automated workflows across the platform.

Monitoring, logging, and security providers are used to maintain system reliability, performance tracking, error monitoring, and security auditing.

3. Current Subprocessors

Asellera currently uses the following subprocessors:

Amazon Web Services (AWS) is used for cloud hosting, compute infrastructure, storage, and networking services.

Supabase is used for database management, authentication, and backend API services.

OpenAI or equivalent artificial intelligence providers are used for natural language processing and AI-driven features.

Retell AI is used for voice automation, call handling, and transcription services.

n8n is used for workflow automation and orchestration across system components.

SMS and telephony providers are used for sending and receiving SMS messages and supporting voice communication workflows.

4. Data Protection Standards

All subprocessors are required to implement appropriate security controls to protect data, including encryption of data in transit using TLS 1.2 or higher and encryption of data at rest using industry-standard encryption methods such as AES-256 or equivalent.

Subprocessors must implement access controls, authentication mechanisms, and monitoring systems designed to prevent unauthorized access.

Where applicable, subprocessors are required to comply with HIPAA-related safeguards when handling protected health information on behalf of Asellera.

5. Data Usage Restrictions

Subprocessors are strictly prohibited from using Asellera data for their own purposes, including marketing, analytics unrelated to service delivery, or training generalized machine learning models unless explicitly authorized in writing by Asellera and the relevant healthcare provider.

Subprocessors may only process data for the purpose of providing contracted services to Asellera.

Subprocessors are not permitted to retain data longer than necessary to perform their services.

6. Subprocessor Updates

Asellera may add, remove, or replace subprocessors from time to time as the platform evolves.

This page will be updated to reflect any material changes to subprocessors. All new subprocessors are required to meet security and privacy standards that are substantially equivalent to those described in this document.

7. Contact

If you have questions about Asellera’s subprocessors or data handling practices, please contact:

Email: privacy@asellera.com
Company: Asellera

Approval

Approved By: Shane Senha, CEO
Company: Asellera
Version: 1.0
Date: June 16th 2026