Who processes data for us
Subprocessors
The third parties that process data for ClaimParrot, what each one does, what it receives and where it is located, and how we tell you before the list changes.
Version 2026-10-19 · Last updated October 19, 2026
About this list
ClaimParrot is operated by KERA Tech Solutions L.L.C., a company registered in Kosovo and based in Prizren. Each provider below receives only what its task needs. None of them receives protected health information, because ClaimParrot does not accept it.
This list is part of our Privacy Policy and our Data Processing Addendum. It last changed on October 19, 2026.
Website, requests and payments
These providers process data for every visitor and customer.
| Provider | Purpose | Data it processes | Location |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting and DNS, storage for public-form requests and pilot inquiries, email routing for claimparrot.com addresses, cookie-free page-view statistics | Website request logs; business contact details and the de-identified case in public-form requests; email sent to our addresses | United States company; global network |
| Paddle.com Market Limited | Merchant of Record: checkout, payment processing, sales tax and VAT, invoices, refunds | Billing details entered at checkout (name, email, address, payment method, tax ID). Never case text. | United Kingdom |
| Anthropic, PBC | Drafts packets with Claude models | De-identified case text only (payer, care setting, review stage, the payer's stated reason, criteria cited, clinical summary). Never your name, email or organization. | United States |
| Google LLC (Gmail) | The operator's mailbox: email sent to claimparrot.com addresses, and request notifications, are delivered there | Your messages to us; business contact details and the de-identified case in request notifications | United States |
ClaimParrot accounts
These providers process data once you create a ClaimParrot account and send requests from it. Accounts are opening in stages; until yours is open, only the providers above are involved.
| Provider | Purpose | Data it processes | Location |
|---|---|---|---|
| Railway Corporation | Application hosting for the account portal (app.claimparrot.com) | Account and request data in transit; request logs | United States (US East) |
| Neon, Inc. | Database for accounts, requests and delivered packet files | Account details, de-identified requests, packet files | United States (AWS US East) |
| Clerk, Inc. | Sign-in and account management | Name, email, sign-in identifiers and sessions | United States |
| Resend, Inc. | Account emails: request received, packet ready, and the operator's new-request alert | Your name and email, the request reference, packet type, payer and care setting. Never the case summary. | United States |
| Upstash, Inc. | Rate limiting on forms | One-way hashed counters of network address and email; no case text | United States (US East) |
Business outreach
These providers process the business contact details of organizations we contact about ClaimParrot. They never receive customer requests or case text.
| Provider | Purpose | Data it processes | Location |
|---|---|---|---|
| Instantly (instantly.ai) | Sends and tracks our outreach email sequences and records opt-outs | Business name, contact name and role, work email, sending history, replies and opt-outs | United States |
| Resend, Inc. | Sends one-off follow-up emails to organizations we have contacted | Business name, contact name, work email | United States |
Not on this list
Payers, clearinghouses and your own systems: ClaimParrot never sends anything to them, because your team submits each appeal. GitHub hosts our source code and runs scheduled maintenance jobs but receives no customer content. The ClaimParrot operator is part of ClaimParrot, not a third party.
How we announce changes
We update this page at least 30 days before a new subprocessor starts processing customer data. To be told by email, write to privacy@claimparrot.com with the subject "Subprocessor updates". Customers can object to a new subprocessor as described in the Data Processing Addendum. If a provider fails and has to be replaced urgently, we may give shorter notice and will tell subscribed customers as soon as we can.
October 19, 2026: Railway replaced Vercel as the host for the account portal; Instantly and Resend added for business outreach.
October 18, 2026: list first published.
Questions or requests?
Email privacy@claimparrot.com for privacy requests, legal@claimparrot.com for terms, the DPA and legal notices, or hello@claimparrot.com for anything else. Please never include patient information.