Subprocessors
Last updated: September 30, 2026
These are the service providers Klarify uses to run the Services. We update this page when we add or change a provider. If a new provider will process health information, we email account owners before it starts. Questions: privacy@klarify.ca.
All session recordings, transcripts, notes and other health information are stored in Canada (AWS Montreal). Klarify does not use your session data to train AI models, and AWS Bedrock, AssemblyAI and Deepgram do not train on it.
Providers that process health information
Provider | What it does | Where | What it receives |
|---|---|---|---|
Amazon Web Services, Inc. | Hosting, database, file storage and email | Canada (Montreal) | All Klarify data, encrypted at rest |
Amazon Web Services, Inc. (AWS Bedrock) | AI processing | North America setting: Canada or USA. Europe setting: EU or UK | The session information needed for each AI request, temporarily. Not stored. Not used for training |
Deepgram, Inc. | Transcription (we may use AssemblyAI, Deepgram or both) | Recorded sessions: USA (North America setting) or EU (Europe setting) | Audio, kept only while it is transcribed. Not used for training |
AssemblyAI, Inc. | Transcription | Recorded sessions: USA (North America setting) or EU (Europe setting). Live dictation: USA | Audio, deleted after transcription. Not used for training |
Vercel, Inc. | Application hosting | USA | Requests, processed in memory while they run. Not stored |
Trigger.dev (API Hero Ltd) | Background jobs, such as report generation | USA | The information needed for each job, while it runs. No copy of reports kept |
Clerk, Inc. | Sign-in | USA | Name, email, phone and sign-in data for therapists and client portal users |
Taiga Health (Taiga Technologies, Inc.) | Insurance claim submission. Used only if insurance billing is turned on | USA | Only the claim details you submit: client name, date of birth, address, insurance details, diagnosis and procedure codes, dates of service, provider NPI |
Providers for accounts, support and operations
These providers do not receive session recordings, transcripts, notes or clinical records.
Provider | What it does | Where | What it receives |
|---|---|---|---|
Stripe, Inc. | Payments | USA | Billing details of the subscribing therapist or clinic |
PostHog, Inc. | Product analytics, error and security monitoring | USA | Account details and usage events. Session replays hide all text and inputs |
Mixpanel, Inc. | Product analytics | European Union | Account details and usage events |
Intercom, Inc. | Support chat | USA | Name, email and support messages |
Inngest, Inc. | Job scheduling | USA | Job details needed to run scheduled tasks |
Upstash, Inc. | Caching and rate limiting | USA | Temporary cache data |
Cloudflare, Inc. | Bot protection; hosting for public profile images and support attachments | Global network | Public images, support attachments and bot-check data |
Brave Software, Inc. | Web search for the Klara AI assistant | USA | Search queries. The therapist reviews each search before it runs |
Google LLC (Workspace) | Internal email and documents | USA | Internal team communications |
Slack Technologies, LLC | Internal team notifications | USA | Account activity notifications |
Website and marketing tools
These tools are used on klarify.ca and for sign-up and marketing. Browser tags load only after you accept cookies.
Provider | What it does |
|---|---|
Google Analytics and Google Tag Manager | Website and sign-up analytics |
Meta Platforms, Inc. | Ad measurement for sign-ups |
LinkedIn Corporation | Ad measurement for sign-ups |
MailerLite | Email newsletters and product updates |