Vendor Governance
Authorized Subprocessors
Last Verified: August 2026
To deliver automated remittance triage and clinical appeal generation, RecoupOps engages select third-party service providers (“Subprocessors”). Each entity undergoes thorough security vetting and executes a Business Associate Agreement (BAA) before processing any customer data.
| Subprocessor | Service Scope | Data Location | BAA Executed |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure, RDS PostgreSQL Database, VPC Peering | United States (us-east-1, us-west-2) | Yes (Enterprise Healthcare Agreement) |
| Anthropic Enterprise API | Clinical Appeal Text Synthesis (Zero-Retention Endpoint) | United States | Yes (Commercial Zero-Training BAA) |
| Cloudflare, Inc. | DDoS Mitigation, WAF & DNS Security | United States / Global Edge | Yes |
| Datadog, Inc. | Infrastructure Monitoring & Error Logging (De-identified) | United States | Yes |