Warning: Draft — pending legal review This page is a working draft. Our lawyer reviews it before Josie launches, and the reviewed version replaces it.

Security

Subprocessors

The companies that handle data for Josie, what each one does, what it receives and where.

Last updated

  • ElevenLabs

    What it does
    Voice: hears callers and speaks for Josie
    What it receives
    Live call audio and what is said on the call
    Region
    Being confirmed
    BAA
    Pending
  • Google (language model)

    What it does
    The language model behind Josie's voice, used through ElevenLabs
    What it receives
    What is said on the call, as text
    Region
    Being confirmed
    BAA
    Pending
  • Twilio

    What it does
    Phone calls and texts
    What it receives
    Phone numbers, call routing and the text messages Josie sends and receives
    Region
    Being confirmed
    BAA
    Pending
  • Vercel

    What it does
    Hosting for the website and the app
    What it receives
    Requests to the app, and the files it stores
    Region
    Being confirmed
    BAA
    Pending
  • Neon

    What it does
    The database
    What it receives
    Your business's records, with call content encrypted
    Region
    Being confirmed
    BAA
    Pending
  • Stripe

    What it does
    Billing and payments
    What it receives
    Your billing details and payment card, never call content
    Region
    Being confirmed
    BAA
    Not needed: never receives patient information
  • Resend

    What it does
    Email
    What it receives
    Email addresses and the emails Josie sends you
    Region
    Being confirmed
    BAA
    Not needed: never receives patient information
  • Sentry

    What it does
    Finding and fixing errors
    What it receives
    Technical error reports, never call content
    Region
    Being confirmed
    BAA
    Not needed: never receives patient information
  • PostHog

    What it does
    Understanding how the site and the app are used
    What it receives
    Usage events, never call content
    Region
    Being confirmed
    BAA
    Not needed: never receives patient information
  • Google (sign-in, Places and Calendar)

    What it does
    Signing in with Google, business listings and calendars you connect
    What it receives
    Your Google account details and the business listings Josie looks up
    Region
    Being confirmed
    BAA
    Not needed: never receives patient information
  • Vercel AI Gateway, with Moonshot AI

    What it does
    Drafting a business profile and answers from public information, through the gateway and the model provider behind it
    What it receives
    Public information about a business, never call content
    Region
    Being confirmed
    BAA
    Not needed: never receives patient information