← Back to Home

Sub-processors

Last Updated: August 28, 2026

Lab N Cloud uses the third-party providers below to deliver the service. This page lists all of them, what each one is used for, and what category of data it can receive. We update it when a provider is added or removed.

PHI means protected health information — on this platform, chiefly patient names, prescriptions and case details. Providers marked No PHI receive only business data such as lab addresses or account identifiers.

1. Infrastructure

Provider Purpose Data received Location
OVH Primary application and database hosting All data, including PHI United States
DigitalOcean Standby application and database host, used if the primary becomes unavailable All data, including PHI United States
Cloudflare DNS, TLS termination and content delivery Traffic in transit, which may contain PHI Global edge network
Wasabi Technologies Off-site encrypted backups, and object storage for invoice PDFs, statements and uploaded case files Full database backups and stored documents, including PHI United States

2. Payments

Provider Purpose Data received
Finix Payments Card processing for doctor billing and subscriptions Billing contact and payment details. No PHI
Stripe Card processing (alternate provider) Billing contact and payment details. No PHI

Card numbers are entered directly into the payment provider’s hosted fields and are never stored on Lab N Cloud servers.

3. Shipping

Provider Purpose Data received
Shippo Carrier rates, label purchase and tracking Lab and dental practice addresses
ShipEngine Carrier rates and labels (alternate provider) Lab and dental practice addresses
FedEx Direct carrier integration Shipment addresses and tracking references
UPS Direct carrier integration Shipment addresses and tracking references

Shipping labels carry practice addresses rather than patient details. Case identifiers may appear as a package reference.

4. Communications and other services

Provider Purpose Data received
Transactional email provider Invoices, statements, invitations and notifications Recipient address and message content, which may reference case details
API Ninjas Sales-tax rate lookup Lab postal code only. No PHI

5. Artificial intelligence

The support assistant is not a sub-processor. It runs on a self-hosted model on our own infrastructure, so support conversations — which can contain case details — are never sent to an external AI provider. There is no third-party AI vendor in the data path.

We do not use customer data, including PHI, to train any model.

6. Changes to this list

We will update this page when a sub-processor is added, removed or replaced. If you are a customer and want advance notice of changes, contact us and we will record you for notification.