Glossary
Sub-processor
A third-party vendor a business associate uses to help handle PHI.
A sub-processor is any downstream vendor (cloud host, LLM provider, transcription API) an AI scribe uses that touches PHI. HIPAA requires the primary business associate to hold BAAs with its sub-processors; the clinic should be able to see the full sub-processor list before signing.