Sub-processors
Engaged per Section 9.5 of the Subscriber Terms. We give Subscribers at least 30 days' notice before adding or replacing a sub-processor that processes Patient Data.
| Sub-processor | Purpose | Data involved | Location / transfer basis |
|---|---|---|---|
| Supabase | Database hosting and authentication | All platform data, including Patient Data | EU (eu-west region) |
| Vercel | Application hosting and delivery | Data in transit through the application | EU edge / global CDN |
| Stripe | Subscription billing | Subscriber billing data only — no Patient Data | EU/US (SCCs) |
| Google (Gmail API) | Transactional email delivery | Email addresses and message content of platform notifications | EU/US (SCCs) |
| OpenAI | AI-assisted features | Minimised excerpts required for the feature; not used for model training | EU/US (SCCs) |
Questions about our sub-processors: support@pharmacyconsultation.ie