Sub-processors
Everyone who may touch data on our behalf, what actually reaches them, and where they operate. Short by design — the fewer hands on a patient record, the better.
Last updated: 3 August 2026
Currently engaged
Patient records are stored and processed in Mumbai, India.
Hostinger (VPS hosting)
Active- Purpose
- Runs the application and the database where all records live.
- Data processed
- All doctor account data and all patient records, including uploaded documents.
- Location
- Mumbai, India
Amazon Web Services (S3 — offsite backups)
Active- Purpose
- Holds the nightly database backups off the application server, so records survive the loss of that machine.
- Data processed
- A full copy of the database in every backup — all doctor account data and all patient records, including uploaded documents.
- Location
- Mumbai, India (ap-south-1)
Not currently engaged
These are supported by the software but are not processing your data today. Each becomes active only in the circumstance described, and we will publish it here before that happens.
Transactional email provider
Not engaged- Purpose
- Delivers password-reset links and account emails to the doctor.
- Data processed
- The doctor's own name and email address, and the message body. No patient data is ever emailed.
- Location
- Provider infrastructure (EU/US)
- Status
- Configured per deployment. Named here once a provider is engaged.
Razorpay (payments)
Not engaged- Purpose
- Processes subscription payments.
- Data processed
- The doctor's billing contact and payment details, handled entirely by the gateway — we never see or store a card number. No patient data.
- Location
- India
- Status
- Engaged when paid plans are switched on. Free during early access.
Anthropic (AI assists)
Not engaged- Purpose
- Generates repertory search phrases when the optional AI assist is used. The rubrics shown always come from our own database.
- Data processed
- The symptom text of the case being worked on at that moment. Never the patient list, name or identifiers.
- Location
- United States
- Status
- Off unless a key is configured and the doctor uses the assist. Leave it off and nothing is sent.
What we deliberately do not use
No advertising networks, no analytics that follow you off this site, no data brokers, and no third-party session recording. We do not sell or share data with anyone for their own purposes — which is why this page is short.
WhatsApp sharing is not on this list because it is not an integration: the app hands a message to WhatsApp already installed on your device, so the content travels under your own WhatsApp account, not ours.
Changes
We will give at least 30days' notice by email before a new sub-processor starts processing your data, and you may object on reasonable data-protection grounds — the terms are in §7 of the data processing addendum.
Questions: support@sabkacare.com.