Subcontractors / Subprocessors
A scribe's subprocessors include its cloud provider, LLM API provider, transcription engine, and any observability or analytics vendor. A defensible HIPAA posture requires a published subprocessor list, downstream BAAs, and notice of material changes.