Sub-processors — Levion Clinic
Last updated: 15 October 2026
Also available in עברית · Русский. If there is any inconsistency between the versions, the Hebrew version prevails.
Levion CS and T ("Levion") processes clinic data on behalf of each clinic under the Data Processing Agreement the clinic signs in the Levion setup wizard (clause 8.4). This page lists the third parties Levion engages that process clinic data, what each receives and where.
Levion gives at least 30 days' notice before adding a new sub-processor; a clinic may object as set out in the agreement. Clinic data is stored in Israel.
1. Sub-processors engaged by Levion
| Company | Purpose | Data it receives | Location |
|---|---|---|---|
| Google Cloud Google LLC and affiliates |
Hosting: application, database, file storage, staff sign-in, backups, security scanning | All clinic data, encrypted in transit and at rest | Israel — Tel Aviv region (me-west1) |
| Amazon Web Services Amazon Web Services, Inc. and affiliates |
Sending the clinic's emails from the system (from October 2026): messages to patients from the Chats page, reminders, staff invitations, the accountant export | Recipient address, subject, message body and attachments — what the clinic writes | Israel — Tel Aviv region (il-central-1) |
| Resend Resend, Inc. |
Sending Levion's emails: staff invitations, password links, system notices, and the monthly accountant export the clinic switches on | Recipient email address and the email content. Emails contain no medical information. The accountant export, sent only to the clinic's own accountant when the clinic enables it, contains payer names, ID numbers, amounts and payment methods — never treatment details | Email sent from the EU (Ireland); company in the USA |
| 019 019 SMS · 019sms.co.il |
Sending SMS messages on the clinic's behalf (appointment reminders, links, verification codes) | Patient phone number and message text (no medical information) | Israel |
2. Services the clinic connects itself
These services are not Levion's sub-processors. They process data under the clinic's own agreement with them (see clause 9 of the agreement):
- WhatsApp, Facebook Messenger and Instagram (Meta) — through the clinic's own business account;
- invoicing providers (Morning / Green Invoice, Invoice4U, iCount);
- payment processors (PayMe, Cardcom, Hyp);
- CloudTalk (telephony, optional).
Levion never stores full payment-card details.
3. Artificial intelligence
No external AI provider receives patient data today. Optional AI features, when a clinic switches them on, are planned to run on Google Cloud in Israel; any new provider is added to this list with 30 days' notice.
Questions
Questions about this page or about data processing: alexander@levion.tech.
Levion CS and T · Givi Kartozia 10, Tbilisi, Georgia