Sub-processors
Effective October 7, 2026 · Version 2026-10-07 · All clinics
The companies Cue uses to process clinic data, what they do and where.
1. Current sub-processors
Cue uses the following sub-processors to provide the Service. For clinics on the European platform (eu.cueaba.com), the clinical database, file storage and application servers are in Frankfurt, Germany. Some services, marked below, process limited data in the United States under the safeguards in the Data Processing Agreement.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. (on Amazon Web Services) | Database, authentication and file storage | EU platform: Frankfurt, Germany. US platform: United States |
| Vercel Inc. | Application hosting and serverless functions | EU platform: Frankfurt, Germany. US platform: United States. Global network edge for encrypted traffic |
| Anthropic, PBC | AI features such as note drafting and daily briefings, only when they are used | United States |
| Resend, Inc. | Transactional email, such as sign-in codes, invitations and notifications | United States |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Subscription billing and payments. Receives billing contact details only, no clinical data | United States / Ireland |
| DocuSeal | Electronic signature of documents, when used | European Union / United States |
| Google LLC (Firebase Cloud Messaging) | Push notifications to mobile devices. Notification text excludes clinical details | United States |
| Apple Inc. (Apple Push Notification service) | Push notifications to Apple devices. Notification text excludes clinical details | United States |
| Twilio Inc. | Text message delivery, when enabled | United States |
| Availity, LLC | Insurance eligibility and claims clearinghouse. US clinics only, when enabled | United States |
2. Changes
Cue notifies clinic account owners by email and in the Service at least 30 days before adding or replacing a sub-processor. Clinics can object as described in the Data Processing Agreement.