Sub-processors

Overview

A sub-processor is a third party that processes personal data on Doctena's behalf in the course of delivering our service to you. Every sub-processor below is bound to Doctena by a contract that includes the Article 28 GDPR clauses, equivalent technical and organisational measures, and, where relevant, the European Commission's Standard Contractual Clauses for transfers outside the EU/EEA.

Internal-only suppliers (HR, accounting, hardware vendors, office services, internal collaboration tools that don't touch patient or customer data) are not listed here. They appear in our internal Suppliers Register and are subject to the same security review process.

Our commitments

• Doctena gives the controller 14 days' prior written notice before adding or changing a sub-processor that touches personal data.
• During the notice window the controller may object on reasonable grounds related to the protection of personal data.
• If the controller objects, Doctena either addresses the controller's concerns or, failing that, terminates the affected portion of the service at no penalty.
• The register on this page is refreshed at least monthly and within 14 days of any material change.
• Material changes are also recorded in our site changelog.

Current register

Cloud infrastructure

Networking & security

Messaging

Media & maps

Communications

Payments & billing

Support

Productivity

Forms & consent

Analytics

Marketing & CRM

Observability

Data residency at a glance

Of 28 listed sub-processors:

• EU
  17
• Global (EU-localized)
  1
• EU + US (SCCs)
  4
• US (SCCs)
  6

Recently decommissioned

The following suppliers have been removed from Doctena's production environment in the last 12 months. Where these suppliers held personal data, that data has been deleted or returned to Doctena per the relevant contract.