Sub-processors — TimingFlow

TimingFlow uses the service providers below to operate the platform. Each one is bound by a data processing agreement and receives only the data needed for the feature you use.

Our AI data policy

Claude AI (AWS Bedrock) always follows your project data region. For a Canadian project, Claude requests run in Canada (ca-central-1).
Health data never goes to a third-party AI provider. Clinical and business-medical modules (AI scribe, clinical notes, intakes) only use in-region AWS services.
Specialized AI providers (voice, image, video, transcription) are used for all other data when you use those features, and may process it outside Canada. The app shows a notice on each feature that uses one.

Infrastructure

Provider	Purpose	Data sent	Processing location
Amazon Web Services (AWS Canada)	Hosting, application servers, databases, backups, transactional email (Amazon SES), Claude AI via AWS Bedrock, transcription (Transcribe), speech (Polly), OCR (Textract)	All account, workspace and project data; health data (clinical modules)	Canada (ca-central-1, Montreal) - your project data region
Cloudflare	Content delivery network, DNS, domain registration, file storage (R2), published-site hosting, bot protection (Turnstile)	Published site content, uploaded files, visitor IP addresses and request metadata	Global edge network
Stripe	Payments, subscriptions and invoices	Billing name, email, billing address, payment details (collected directly by Stripe)	United States / Canada
Twilio	SMS (two-factor codes, notifications) and phone/voice features	Phone numbers, message content, call audio for voice features	United States
Agora	Real-time audio/video for meetings and webinars	Audio/video streams and participant display names during live sessions	Global network
SendGrid (Twilio)	Alternative email delivery - only when a workspace selects it as its email provider	Recipient addresses and email content	United States

Artificial intelligence

Provider	Purpose	Data sent	Processing location
AWS Bedrock (Anthropic Claude)	Text AI: writing, analysis, AI scribe, assistants	Prompts and the project content you submit, including health data for clinical features	Your project data region (Canada: ca-central-1). Never leaves the region for health or personal data.
ElevenLabs	Text-to-speech, voice cloning, dubbing, speech-to-text	Text to be spoken; voice recordings you upload for cloning (with consent); audio to transcribe or dub	United States
fal.ai	Image, video and 3D generation and editing	Prompts and images you upload for editing	United States
Replicate	Image, video and audio AI models	Prompts, images and audio you submit	United States
Kie.ai	Image and video generation	Prompts and images you submit	Outside Canada (provider infrastructure)
Modal	GPU processing: video background and text removal, talking avatars, fast voice cloning	Videos, images and voice samples you submit for processing	United States
Google (Gemini API)	Text AI for some content, translation and automation features	Prompts and non-health content	United States
OpenAI	Meeting transcription (Whisper) and optional text-to-speech voices	Meeting audio; text to be spoken	United States
Anthropic (direct API)	Translation for video dubbing	Transcript text of videos you dub	United States
Text-to-speech voice providers (Microsoft Azure Speech, Google Cloud TTS, Deepgram, Resemble AI, Murf, Play.ht)	Text-to-speech when you choose one of their voices	Text to be spoken	United States / provider regions
Vectorizer.ai	Image-to-vector conversion	Images you choose to vectorize	Outside Canada (provider infrastructure)

Changes to this list

We update this page before adding a new sub-processor. Questions: [email protected]. See also our Privacy Policy and Trust Center.