● Trust
Subprocessors
The third-party services that process data on our behalf. Services marked as handling health information are only used where the data needs them. Some are connected only when a business chooses to link its own account (for example its own calendar, phone number or store).
| Service | What it's used for | Health data |
|---|---|---|
| Acuity Scheduling | Bring-your-own calendar (customer connects their own Acuity account) — two-way via opaque blocks | No |
| Anthropic | LLM (answering, drafting, extraction) | Yes |
| Calendly | Bring-your-own calendar (customer connects their own Calendly account) — read-only availability | No |
| Flitt | Card payments (no PHI) | No |
| Fly.io | Hosts the voice bridge — live phone-call audio is streamed through it to the AI voice providers (inbound + outbound calls) | Yes |
| Realtime voice (Gemini Live — default patient/onboarding voice) | Yes | |
| Google (Business Profile) | Reading a business's Google reviews and posting the replies it approves, when the business connects its Business Profile | No |
| Google Calendar | Bring-your-own calendar (customer connects their own Google account via OAuth) — two-way appointment sync | Yes |
| Housecall Pro | Bring-your-own field-service system (home services) — read-only customer + scheduled-job sync | No |
| HubSpot | Bring-your-own CRM (sales vertical) — contact → lead sync, activity logging, and (when crm_writeback_live is on) lead push: creates the contact and a note with the lead's first message | No |
| Jobber | Bring-your-own field-service system (home services, OAuth) — read-only client + visit sync | No |
| Meta Platforms (Messenger, Instagram) | Customer messages to a business's Facebook Page or Instagram account, when the business connects them — received and replied to through Meta's APIs | No |
| Open Dental | Bring-your-own practice management system (customer connects their own Open Dental) — patient + appointment sync, appointment write-back | Yes |
| OpenAI | Realtime voice + speech-to-text (patient/onboarding voice, fallback) | Yes |
| Pipedrive | Bring-your-own CRM (sales vertical) — contact → lead sync, activity logging, and (when crm_writeback_live is on) lead push: creates the contact and a note with the lead's first message | No |
| Resend | Transactional email + patient email replies (email answering routes patient message bodies through Resend once email_answering_live flips) | Yes |
| ServiceTitan | Bring-your-own field-service system (home services) — read-only customer + appointment sync | No |
| Shopify | Commerce — the store a business connects (its own app or the Guildia App Store app): read-only orders, customers, products and stock; privacy requests via Shopify webhooks | No |
| Slack | Critical-alert pager — platform alert titles/details are posted to the founder's Slack channel | No |
| Supabase | Database + storage (PHI at rest) | Yes |
| Telegram | Customer messages to a business's Telegram bot, when the business connects one | No |
| Telnyx | Bring-your-own telephony (customer connects their own Telnyx account) — SMS + voice from their number | Yes |
| Twilio | SMS transport | Yes |
| Vercel | Hosting (no PHI persisted) | No |
See also Trust & Security.