Overview
To deliver the PracticPro services, we engage carefully selected third-party providers ("Sub-processors") to process customer data on our behalf. This page lists those providers, what they do, and where they operate. We update this list as our infrastructure changes.
Our use of Sub-processors is governed by our Terms of Service and our Data Processing Addendum. Each Sub-processor is contractually bound to data-protection obligations no less protective than those in our agreement with you.
Get notified of changes
We give at least 30 days advance notice before adding a new Sub-processor or making a material change. To subscribe to those notifications, email us at [email protected] with the subject "Subscribe to Sub-processor Updates".
Hosting and Infrastructure
Compute, storage, networking, and content delivery.
| Sub-processor | Purpose | Categories of data processed | Location of processing |
|---|---|---|---|
| DigitalOcean, LLC core | Cloud hosting for the PracticPro application, databases, file storage, and encrypted backups. | All customer data processed by the platform. | United States |
| Cloudflare, Inc. core | Content delivery network, TLS/HTTPS termination, DDoS protection, DNS. | Traffic metadata, IP addresses, request payloads in transit. | Global (with EU-resident edge routing where applicable) |
Email Infrastructure
Used to send PracticPro's transactional emails (account verification, password reset, system notifications). Emails that you send through PracticPro to your own clients are sent through your own connected email provider, not through this Sub-processor.
| Sub-processor | Purpose | Categories of data processed | Location of processing |
|---|---|---|---|
| Google LLC (Google Workspace) core | SMTP delivery of PracticPro's outbound transactional emails to customer users. | Recipient email addresses, sender display names, message content (limited to PracticPro-system messaging). | United States |
Communications
Voice calls, SMS, voicemail, and call-recording infrastructure.
| Sub-processor | Purpose | Categories of data processed | Location of processing |
|---|---|---|---|
| Twilio Inc. core | Voice calls, SMS messaging, and number provisioning. | Phone numbers, call metadata, message content, call recordings, voicemail. | United States |
| Telnyx LLC core | Voice calls, SMS messaging, and number provisioning (alternate provider). | Phone numbers, call metadata, message content, call recordings, voicemail. | United States |
Optional Features and Integrations
These Sub-processors are engaged only when a customer enables the corresponding feature or integration. AI providers operate under zero-retention API tiers and do not use customer data to train their models.
| Sub-processor | Purpose | Categories of data processed | Location of processing |
|---|---|---|---|
| OpenAI, L.L.C. optional | Language-model inference for AI-assisted features (drafting, summarization, transcription, audio synthesis). Engaged only when AI features are enabled. | Text content submitted to AI features; audio for speech-to-text and text-to-speech. | United States |
| Anthropic, PBC optional | Language-model inference for AI-assisted features. Engaged only when AI features are enabled. | Text content submitted to AI features. | United States |
| Google LLC optional | Google Calendar synchronization, Google account sign-in (OAuth). | Calendar events, attendee email addresses, OAuth tokens, Google account identifiers. | United States |
| Intuit Inc. (QuickBooks Online) optional | Accounting synchronization for customers who connect their QuickBooks Online account. | Customer financial records, invoices, payments, contacts. | United States |
| Meta Platforms, Inc. optional | Facebook Ads / Lead Ads integration for customers connecting Meta business assets. | Ad campaign metadata, lead form submissions. | United States |
Customer-Initiated Integrations
PracticPro offers ways for you to connect your account to third-party services of your choice, including AI assistants via the Model Context Protocol (MCP), automation platforms like Zapier, and direct API access. When you choose to connect a third party, that third party processes your PracticPro data under your own agreement with them, not under PracticPro's Sub-processor obligations. We do not direct or control what these third parties do with the data you ask them to access. Listed here for transparency about what is and is not in scope of our Sub-processor obligations.
| Connection type | What it is | Who is responsible for the third party's data handling |
|---|---|---|
| Model Context Protocol (MCP) | You connect an AI assistant of your choice (for example, Claude or ChatGPT) to your PracticPro account. The AI assistant can then read and act on your PracticPro data under your direction. | You and your chosen AI provider. PracticPro does not contract with the AI provider on your behalf. |
| REST API and OAuth | You connect any third-party application of your choice to your PracticPro account using PracticPro's API or OAuth. | You and the third-party application provider. |
| Outbound webhooks | You configure PracticPro to send events to a URL you specify (for example, an automation platform). | You and the operator of the destination service. |
Website and Pre-Login Analytics
The providers below collect data from visitors to PracticPro's public website and pre-login pages (sign-in, sign-up). They do not run inside the authenticated PracticPro application and do not have access to any data you store in PracticPro about your own clients, contacts, or projects. They are gated by cookie consent.
| Vendor | Purpose | Categories of data processed | Location of processing |
|---|---|---|---|
| Google LLC (Google Analytics) | Aggregate visitor analytics for the PracticPro public website. Loaded only when the visitor accepts analytics cookies. | IP address, device and browser information, page-view events, referrer. | United States |
| Hotjar Ltd. | Session-recording and behavior analytics on PracticPro's pre-login pages (sign-in, sign-up, password reset). Loaded only when the visitor accepts analytics cookies. | IP address, device and browser information, page interactions and session recordings on pre-login pages. | Malta (European Union) |
PracticPro Billing
The provider below processes data only in connection with PracticPro's billing relationship with you (the customer). It does not access or process data you store in PracticPro about your own clients, contacts, or projects. Listed here for full transparency.
| Vendor | Purpose | Categories of data processed | Location of processing |
|---|---|---|---|
| Stripe, Inc. | Processes subscription payments and other charges from PracticPro to the customer. | Customer's billing contact information, cardholder data, and payment metadata for the PracticPro subscription. | United States |
How we evaluate Sub-processors
Before engaging a new Sub-processor, we perform a written assessment that covers data protection, security posture, and contractual safeguards. Each Sub-processor is bound by a written agreement that imposes data-protection obligations no less protective of customer data than those we owe you.
Changes to this list
We will provide at least 30 days advance notice before adding a new Sub-processor or making a material change, except in cases of urgent operational need. To receive notifications, email [email protected] with the subject "Subscribe to Sub-processor Updates".
Questions
If you have questions about a Sub-processor or want to object to a planned change, contact us at [email protected].
Last updated: May 21, 2026
