Legal
This register lists the vendors that support the platform, for transparency. It is being finalized and is not legal advice. For any questions about how it applies to you, contact hello@cairahealth.ca.
Vendors listed
11
Status
Being finalized
Database, authentication, and application data storage.
Clinic account data, staff identity data, patient records, appointments, audit logs, and application configuration.
Data location depends on the approved deployment. Canadian storage requires verified Canada (Central) projects; residency approval is pending for clinical launch.
Application hosting, serverless functions, routing, and deployment.
Request metadata and minimal operational logs. Patient health information is not written to runtime logs.
Processing may occur outside Canada.
Card-on-file setup, payment method tokenization, and no-show charge processing.
Payer/contact identifiers, Stripe customer and payment method IDs, card brand/last-4/expiry summary, and payment status metadata.
Payment processing may occur outside Canada. Raw card numbers are never stored in this application.
Transactional email delivery for staff invites and appointment messages.
Recipient email, message delivery metadata, and template content sent by the app. Clinical note content is not sent by email.
Processing may occur outside Canada.
SMS delivery for appointment reminders and operational notifications.
Recipient phone number, message delivery metadata, and reminder text sent by the app.
Processing may occur outside Canada.
Optional AI chart-note and clinical support drafts, enabled only after explicit approval.
Clinical text deliberately submitted for a draft. Application-state storage is disabled in these requests; organization retention controls and contractual approval still require verification.
Processing may occur outside Canada. Clinical use remains subject to owner and legal approval.
Optional private-room video appointments.
Live audio/video, room-scoped admission tokens and connection metadata. Recording and transcription are not enabled by the app.
Processing location and applicable vendor agreement require approval before clinical use.
Optional AI front-desk call handling and staff handoff.
Caller contact details, submitted call transcripts, scheduling preferences and handoff context when enabled.
Processing may occur outside Canada. Provider/data-handling approval is required before use.
Planned outbound fax integration; transmission is not implemented or enabled in this pilot.
The application currently stores internal queue requests only and does not send fax documents.
Any future delivery location and vendor agreement require verification and approval.
Error monitoring and diagnostic event capture when configured.
Sanitized error messages, stack traces, route context, and operational metadata. Health information is scrubbed before telemetry is sent.
Processing may occur outside Canada.
Rate limiting for public booking endpoints when configured.
Rate-limit keys derived from route, clinic identifier, and client IP. Patient record content is not stored.
Processing may occur outside Canada.