Sub-processors
Everyone who may touch data on our behalf, what actually reaches them, and where they operate. Short by design — the fewer hands on a patient record, the better.
Last updated: 17 August 2026
Currently engaged
Patient records are stored and processed in Mumbai, India.
Hostinger (VPS hosting)
Active- Purpose
- Runs the application and the database where all records live.
- Data processed
- All doctor account data and all patient records, including uploaded documents.
- Location
- Mumbai, India
Amazon Web Services (S3 — offsite backups)
Active- Purpose
- Holds the nightly database backups off the application server, so records survive the loss of that machine.
- Data processed
- A full copy of the database in every backup — all doctor account data and all patient records, including uploaded documents.
- Location
- Mumbai, India (ap-south-1)
Brevo (transactional email)
Active- Purpose
- Delivers account emails to the doctor: verification links, password resets, activation notices, and messages sent through the public contact form.
- Data processed
- The doctor's own name and email address and the full message body — which, like any email provider, Brevo necessarily processes and briefly retains in its delivery logs. No patient data is ever emailed: prescriptions, records and documents never travel by email at all, and the contact form tells visitors not to include patient details.
- Location
- European Union (Brevo SAS, France — GDPR-regulated)
MSG91 (SMS delivery)
Active- Purpose
- Delivers one-time codes (online booking, patient sign-in, doctor phone check) and appointment confirmations, reminders and cancellations.
- Data processed
- The recipient's mobile number and the message: the code, or the patient's name, the clinic's name and the appointment time. Never symptoms, prescriptions or any other clinical detail.
- Location
- India (Walkover Web Solutions, MSG91)
Not currently engaged
These are supported by the software but are not processing your data today. Each becomes active only in the circumstance described, and we will publish it here before that happens.
Razorpay (payments)
Not engaged- Purpose
- Processes subscription payments.
- Data processed
- The doctor's billing contact and payment details, handled entirely by the gateway — we never see or store a card number. No patient data.
- Location
- India
- Status
- Engaged when paid plans are switched on. Free during early access.
Anthropic (AI assists)
Not engaged- Purpose
- Generates repertory search phrases when the optional AI assist is used. The rubrics shown always come from our own database.
- Data processed
- The symptom text of the case being worked on at that moment. Never the patient list, name or identifiers.
- Location
- United States
- Status
- Off unless a key is configured and the doctor uses the assist. Leave it off and nothing is sent.
What we deliberately do not use
No advertising networks, no analytics that follow you off this site, no data brokers, and no third-party session recording. We do not sell or share data with anyone for their own purposes — which is why this page is short.
WhatsApp sharing is not on this list because it is not an integration: the app hands a message to WhatsApp already installed on your device, so the content travels under your own WhatsApp account, not ours.
Changes
We will give at least 30days' notice by email before a new sub-processor starts processing your data, and you may object on reasonable data-protection grounds — the terms are in §7 of the data processing addendum.
Questions: contact@hpills.com.