The subprocessors
Schedule B of the Subscriber Agreement names nine — Microsoft Azure (hosting, Canada Central), Microsoft Azure AI Speech (scribe speech-to-text, Canada Central), Cloudflare (network security, global edge), Stripe (payments, Canada/US), Twilio (SMS, US), Twilio SendGrid (email, US), Anthropic (AI, US), Daily.co (telehealth media, US/global edge) and MaxMind (IP geolocation, a local lookup with no data sent) — each with its processing location and the data it touches, and adding one that handles health information takes 30 days' notice with a right to object.
2705
Schedule B, as published
| Provider | Role | Location | Data touched |
|---|
| Microsoft Azure | Cloud hosting, storage, backups | Canada (Canada Central) | All Customer Data incl. health information, encrypted at rest |
| Microsoft Azure AI Speech | Real-time speech-to-text for the Ambient Scribe | Canada (Canada Central) | Encounter audio, processed in real time to text; configured not to retain audio, never stored by Arxeon |
| Cloudflare | Network security, DDoS protection, content delivery | Global network (encrypted transit) | Traffic metadata; encrypted content in transit |
| Stripe | Payment processing and tax calculation | Canada / United States | Billing contact, address, payment details — no health information |
| Twilio | SMS delivery and phone-number verification | United States / carrier networks | Phone numbers and SMS content |
| Twilio SendGrid | Email delivery | United States | Email addresses and message content |
| Anthropic | AI processing for AI-assisted features | United States | Content submitted to AI features only when used — no model training, minimized retention under a data processing agreement |
| Daily.co | Live video and audio transport for telehealth | United States / global media edge | Real-time call media, encrypted in transit; no health information stored, calls not recorded |
| MaxMind | IP geolocation for security features | Local database lookup (no data sent) | IP addresses only |
Alberta Health also receives claim data — surname, first name, date of birth, sex, ULI, guardian ULI, address and diagnosis codes — on every claim the clinic approves; that is a disclosure the clinic authorizes, not a subprocessor.
Changes
Arxeon binds each subprocessor that handles health information to obligations materially as protective as the Information Manager Agreement, gives at least 30 days' notice (email or in-app) before a new one handles health information, and if the clinic reasonably objects on privacy grounds and no alternative can be offered, the clinic may terminate the affected services with a pro-rata refund of prepaid, unused fees. Arxeon remains responsible for its subprocessors.
This card reproduces Schedule B as published; the agreement and the Privacy Policy govern.
Where to look