Wise DoctorSub-processors
This list is Annex III of the Data Processing Addendum. Wise Doctor binds each provider to data protection obligations no less protective than the DPA and remains liable for their performance.
Any addition or replacement is announced at least 30 days in advance by email, in the Platform or on this page; Providers may object within 15 days. No payment provider is used: the Platform is free of charge.
Current list
| Sub-processor | Service | Data concerned | Location of processing | Transfer safeguard |
|---|---|---|---|---|
| Render Services, Inc. (United States) | Hosting of the API and of the PostgreSQL database, including background tasks | All Platform data; sensitive medical fields encrypted | Frankfurt, Germany (EU) | Standard Contractual Clauses |
| Cloudflare, Inc. – R2 (United States) | Private file storage | Medical documents, test results, profile photos | European Union (Cloudflare EU jurisdiction) | Standard Contractual Clauses or EU–US Data Privacy Framework |
| Vercel, Inc. (United States) | Hosting and delivery of the website and of the web application | IP address and technical browsing data; no health data | Global network | Standard Contractual Clauses or EU–US Data Privacy Framework |
| OpenRouter, Inc. (United States), with Claude models (Anthropic, PBC) run on Google Cloud or Amazon Web Services | Access to AI models for clinical decision support and the Ask Wise assistant | Pseudonymised texts only; zero data retention and no training required on every request | United States | Standard Contractual Clauses |
| Sendinblue SAS – Brevo (France) | Transactional emails (confirmations, reminders, password) | Email address, name, appointment date and time | European Union (France) | No transfer outside the EU |
| Google LLC (Firebase Cloud Messaging), Apple Inc. (APNs) and the push services of browsers (Google, Apple, Mozilla, Microsoft) | Push notifications on mobile devices and browsers | Device token or subscription identifier and a short notification text, without medical details | Mainly United States | EU–US Data Privacy Framework |
| Functional Software, Inc. – Sentry (United States) | Monitoring of technical errors, when enabled | Technical error reports, cleaned of personal data before sending | United States | Standard Contractual Clauses or EU–US Data Privacy Framework |