SUBPROCESSORS
Last updated August 16, 2026
A subprocessor is a third-party service provider that Cubic Insights LLC("we," "us," or "our") uses to help deliver PCIT Tracker and that may process Account Data, Customer Data, or Usage Data (each as defined in our Privacy Policy) on our behalf. We vet each provider before use and rely on written terms that restrict its use of the data to providing services to us and, where the subprocessor may handle protected health information, on an applicable Business Associate Agreement (BAA). We keep this list current.
CURRENT SUBPROCESSORS
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Application hosting and file storage, operated under a Business Associate Agreement with AWS | Uploaded files (including session media and documents) and application logs | United States |
| Neon, LLC | Managed PostgreSQL database hosting, operated under a Business Associate Agreement with Neon | All application records, including clinical and session data | United States |
| Google LLC (Google Workspace) | Company and support email, operated under a Business Associate Agreement with Google | Support communications you send us: name, email address, and message contents | United States |
| Stripe, Inc. | Payment processing and subscription billing | Billing contact and payment data | United States |
| Resend | Transactional email (e.g., account verification, password reset) | Name and email address | United States |
| PostHog, Inc. | Product analytics and session replay, operated under a Business Associate Agreement with PostHog | Pseudonymous user identifier, page and interaction events, and masked session recordings (on-screen text and typed input are obscured in your browser before transmission) | United States |
| Discord Inc. | Internal operations alerts to a private, access-controlled company channel (new signups, plan changes, support messages, and product feedback), used only by our team for onboarding and support | Name, email address, profile image, and, for support and feedback alerts, the contents of your message (anonymous feedback omits name and email) | United States |
| Google LLC / Microsoft Corporation | Optional single sign-on (SSO) | Name, email address, and profile image (only if you choose to sign in with SSO) | United States |
We never sell personal information to any of these providers, and we do not permit any of them to use data processed for us for advertising or marketing to our users.
CHANGES TO THIS LIST
When we add or replace a subprocessor, we will update this page before the new subprocessor begins processing data. Customers with an executed BAA or data processing agreement will receive notice of subprocessor changes as provided in that agreement.
QUESTIONS
If you have questions about our subprocessors, or would like to be notified when this list changes, contact us at admin@pcit-tracker.com. For more on how we protect data, see our Security Overview and HIPAA & BAAs pages.