Chronos
Sign inGet startedGGeett ssttaarrtteedd
Why ChronosFeaturesPricingCompareSecurityHow it worksSign inGet started
Data processing transparency

Subprocessors & data processing partners

Chronos uses a small set of vetted third-party vendors to operate the platform. This page lists every vendor that may process customer data on our behalf, what data each receives, its geographic location, and its Business Associate Agreement (BAA) status. We update this page whenever our subprocessor list changes.

Last updated: July 13, 2026. Questions? Email security@medchronosai.com

VendorPurposeData processedLocationBAA status
AptibleHIPAA-eligible cloud hosting and managed databaseAPI server runtime, Postgres database containing all case and user dataUnited StatesYes — Aptible's platform-level BAA covers all hosted workloads
Google Cloud StorageObject storage for uploaded medical records and generated exportsUploaded medical record files (PDFs, images, DOCX), generated PDF/Word exports, user avatarsUnited StatesYes — Google Cloud BAA (Healthcare API addendum)
Aptible AI GatewayBAA-covered LLM routing for chronology extraction and AI assistant — zero data retentionText extracted from uploaded medical records, processed in-context during chronology generation and case chat. Zero Data Retention (ZDR) — text is not stored, logged, or used for training after the response is returned.United StatesYes — Aptible AI Gateway is BAA-covered. ZDR is structurally guaranteed by the gateway configuration — record text is processed in-context only and never persisted by the LLM provider.
ClerkUser authentication and identity managementEmail addresses, passwords (hashed), MFA secrets, session tokens. No medical record content or case PHI is processed by Clerk.United StatesYes — Clerk offers a BAA for healthcare customers
StripePayment processing and subscription billingCredit card data (handled directly by Stripe, never touches Chronos servers), billing addresses, subscription status. No PHI or medical record content.United StatesNot applicable — Stripe processes billing information only, not PHI. Stripe is not a Business Associate under HIPAA.
ReplitDevelopment and CI/CD environment onlySource code and development tooling only. Replit is NOT used in the production environment — production runs on Aptible. No real PHI is processed in the Replit environment.United StatesNot applicable to production (dev environment only)

Key data protection commitments

  • All production PHI remains in the United States at all times.
  • Every vendor with access to PHI has signed a Business Associate Agreement (BAA).
  • Medical record text sent to the AI gateway is processed in-context only — zero retention, never used for model training.
  • Uploaded files are stored in Google Cloud Storage (US region) with AES-256 encryption at rest and are accessible only to the uploading firm.
  • Customers can permanently delete all their data (cases, records, account) at any time — deletions are irreversible and logged.