Public list · 14 September 2026
Subprocessors
Sweetwalnut uses these providers to run the product. Pending agreements are not signed. Do not put real patient health information into AI features until OpenAI paperwork and DPIA sign-off are done. Roles (controller vs processor) are drafts for counsel.
| Name | Role | Typical region | Clinical content | Agreement |
|---|---|---|---|---|
| Railway | API and database hosting | Often United States | Yes — selected fields encrypted at rest | DPA / SCC pending |
| Vercel | Web application | Global edge / US | Session cookie; not clinical bodies in browser storage | DPA pending |
| OpenAI | Draft notes, embeddings, transcription | United States | Only if production PHI mode is on — currently gated off | BAA + ZDR not cleared |
| Stripe | Practice subscription billing | US / global | No — billing identity only | Keep metadata free of clinical text |
| Clerk | Staff identity SDK (optional Clerk exchange) | Typically US | Email/name — not the clinical record | DPA pending; production domain open |
Not on this list
Team hub / analyse (Marked) and the sales CRM (Flying Walnut) are separate products and must not hold the clinical record. Development cloud agents use synthetic data and a fake AI mode — never the production database.