Sub-processors
Who processes customer personal data for us, and where.
Contents
This is the authoritative list of sub-processors referred to in section 9.1 and Annex III of the Data Processing Terms. Annex III shows its entries at the date of signature; this page is kept current.
The sub-processor of customer personal data is the infrastructure provider of the organisation's data location. Only the sub-processors of an organisation's data location process its customer personal data. A data location whose infrastructure provider is not on this list cannot be chosen and receives no customer personal data.
Infrastructure by data location
United States, European Union and United Kingdom
These locations run on Amazon Web Services, in the AWS region of the location. A dedicated location uses the region of its shared location.
| Data location | Sub-processor | Service | Region |
|---|---|---|---|
| United States | Amazon Web Services, Inc. | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | us-east-1 (Northern Virginia, United States) |
| European Union | Amazon Web Services, Inc. | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | eu-central-1 (Frankfurt, Germany) |
| United Kingdom | Amazon Web Services, Inc. | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | eu-west-2 (London, United Kingdom) |
| Custom region in Amazon Web Services | Amazon Web Services, Inc. | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | the region named in the Order Form |
Türkiye, sovereign national clouds and custom regions with another provider
These locations use an infrastructure provider in the country of the location. The provider is named here, and in the Order Form where there is one, with 30 days' notice, before the location receives customer data (Data Processing Terms, section 9.5).
| Data location | Sub-processor | Service | Location |
|---|---|---|---|
| Türkiye | named here before the location receives customer data | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | Türkiye |
| Sovereign national cloud | named here before the location receives customer data | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | the country of the location |
| Custom region with a provider other than Amazon Web Services | named here before the location receives customer data | hosting, storage, databases, encryption keys, and the computers that run the Service's language models | the country of the location |
Private and air-gapped installations
The customer hosts and operates the Service on its own infrastructure. We engage no sub-processor for it (Data Processing Terms, section 2.4).
Service vendors (not sub-processors)
These providers are not sub-processors. They receive no customer personal data and process only account, billing and usage data for which GetClinic is controller, as described in the Privacy Notice. They are the same for every data location.
| Provider | Service | Location |
|---|---|---|
| Mailgun Technologies, Inc. | United States | |
| Twilio Inc. | phone verification and text-message notices | United States |
| Stripe, Inc. | payments and invoices | United States |
| Functional Software, Inc. (Sentry) | error reports, with personal and clinical content removed | United States |
| Google LLC | mailboxes for support and other correspondence (Google Workspace); analytics, only with the user's consent, without case details | United States |
| Microsoft Corporation (Clarity) | session recording, only with consent, not on pages with patient data | United States |
| Apple Inc. | push notifications to the Mac app | United States |
GetClinic operating personnel
GetClinic Inc. operates the Service with its own personnel. They have no routine access to customer personal data. Emergency access is read-only, ends after at most 4 hours, is notified to the customer's administrators and is recorded (Data Processing Terms, section 7.3).
| Data location | Where operating personnel work |
|---|---|
| United States, European Union, United Kingdom, dedicated locations and custom regions | Türkiye; with the in-region operators option in the Order Form (Enterprise plans), emergency access only from the region of the data location |
| Sovereign national cloud | the region of the data location, including emergency access |
| Türkiye | Türkiye; all access to customer data, including emergency access and support sessions, is limited to personnel located in Türkiye |
Changes and objections
We notify each customer's administrators, in the Service and by email, at least 30 days before a new sub-processor starts processing customer personal data, and update this page and its date. Where a sub-processor must be replaced urgently to keep the Service secure or running, we notify the customer as soon as possible, and the 30 days run from that notice (Data Processing Terms, section 9.2).
To object, a customer's administrator writes to [email protected] within those 30 days, stating the data protection grounds. We then discuss the objection in good faith. If it is not resolved within 30 days after the objection, the customer may terminate the affected subscription and receive a refund of prepaid fees for the remaining period (section 9.3).