The following Sub-Processors are authorized to Process Customer Personal Data.
We will provide customers with written notice at least thirty (30) days in advance of authorizing a new Sub-Processor, as described in our Data Processing Addendum. Where a Sub-Processor is engaged by an Infrastructure Provider rather than directly by Aesthetix CRM, we provide notice promptly after receiving that provider’s notice to us. Customers may object to a new Sub-Processor within thirty (30) days of our notice.
Published: October 2, 2026. Version: 2026.10.1.
Core Infrastructure Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| HighLevel Inc. | Core CRM platform infrastructure and services | United States | Direct |
| Google Cloud Platform | Cloud hosting and data storage | United States | Via HighLevel |
| Amazon Web Services | Cloud hosting and data storage | United States | Via upstream Infrastructure Providers |
| Cloudflare Inc. | CDN, security, DNS, and performance services | United States | Via upstream Infrastructure Providers |
| DigitalOcean LLC | Cloud hosting and infrastructure | United States | Direct |
| Vercel Inc. | Application hosting and deployment | United States | Direct |
| Supabase Inc. | Database and backend services | United States | Direct |
| Inngest, Inc. | Event-driven workflow orchestration and background job execution for Platform integrations | United States | Direct |
Communication Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| Twilio Inc. | SMS, voice, and communication services | United States | Direct |
| Mailgun Technologies | Email delivery services | United States | Via HighLevel |
AI Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| OpenAI | AI-powered content and automation features | United States | Via HighLevel |
| BotPress | AI chatbot functionality | United States | Via HighLevel |
| RetellAI | Voice AI services | United States | Via HighLevel |
| Synthflow | AI provider services | United States | Via HighLevel |
Payment Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| Stripe Inc. | Payment processing of Customer billing information for Aesthetix CRM subscription, credit and service charges | United States | Direct |
| Nuvei Technologies Inc. | Payment processing for Aesthetix CRM's own billing where used. AX Pay, Aesthetix CRM's optional integrated payment facility, is provided by Nuvei under a merchant agreement entered into directly between the Customer and Nuvei; when a Customer uses AX Pay, Nuvei processes the Customer's patients' payment data as the Customer's own payment provider under that agreement, and Aesthetix CRM processes only transaction references, amounts, status and tokens returned by Nuvei. Aesthetix CRM does not receive or store card numbers. | United States | Direct |
| Authorize.net (Visa Inc.) | Legacy payment processing of Customer billing information for Aesthetix CRM charges; no longer used for new Customers | United States | Direct |
Data Infrastructure Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| CorralData, Inc. | Data warehousing, analytics, and patient reactivation audience processing for Aesthetix Activate. Applies only to customers enrolled in Aesthetix Activate. | United States | Direct |
| Fivetran, Inc. | Data pipeline (ETL) services supporting Aesthetix Activate. Applies only to customers enrolled in Aesthetix Activate. | United States | Via CorralData |
Other Sub-Processors
| Entity Name | Description of Processing | Location | Engaged Via |
|---|
| Zapier Inc. | Workflow automation and integrations | United States | Direct |
| Freshworks Inc. | Customer support services | United States | Direct |
| Gleap | Customer support services | United States | Direct |
| Nightly Data, Inc. DBA Rubie | Customer import data services | United States | Direct |
| Pendo.io | Product analytics | United States | Direct |
| ChartMogul | Subscription analytics | United States | Direct |
| HighLevel India Pvt. Ltd. | Support services provided under HighLevel’s access controls and security program | India | Via HighLevel |
| LeadConnector LLC | Communication services and support | United States | Via HighLevel |
Entities marked Via HighLevel, Via CorralData, or Via upstream Infrastructure Providers are engaged by those providers under our agreements with them and are listed here for transparency. Their appearance on this page reflects the provider’s disclosure and is not a new engagement by Aesthetix CRM.
Change Log
- 2026.10.1: Added Inngest, Inc. (event-driven workflow orchestration and background job execution) as a direct Sub-Processor and Infrastructure Provider. Notice provided under DPA Section 6.2 on October 2, 2026; the objection period under Section 6.3 ends November 1, 2026.
- 2026.09.2: Clarified the roles of Stripe, Nuvei and Authorize.net and the treatment of AX Pay and Customer-connected payment accounts. No sub-processor added or removed.
