Sub-processor Register

How to read this register

A provider applies only when its corresponding service is deployed or enabled for a customer. The Order Form and deployment configuration determine actual use. Coolify and PostgreSQL are self-hosted software components, not separate processing organisations.

Core infrastructure

• Fasthosts Internet Limited — UK server infrastructure and hosting — United Kingdom.
• Cloudflare, Inc. — DNS, network security, content delivery and optional object storage — UK, EEA and global network locations subject to safeguards.

Communications and operations

• Brevo / Sendinblue SAS — transactional email — EEA and documented service locations.
• Sentry / Functional Software, Inc. — optional diagnostics when enabled — EEA, United States and documented locations.
• Apple Push Notification service and Google Firebase Cloud Messaging — optional mobile push delivery — global provider infrastructure.

Optional product providers

• OpenAI and the applicable contracting affiliate — optional AI-assisted report drafting and structured import when enabled — contracted API processing locations and safeguards.
• Mapbox, Inc. — optional map tiles and static-map display; map requests may contain location coordinates — global provider infrastructure.

Safeguards

Providers receive only information needed for their function. We review security and privacy terms, impose written obligations where applicable, restrict access and use lawful transfer mechanisms. Optional providers do not receive care data unless the feature is enabled and the request requires it.

Changes and objections

We update this register before material new processing where reasonably practicable. Customers with general authorisation may object on reasonable data-protection grounds during the notice period in their Agreement. Contact hello@caremasym.com for deployment-specific details.