Sub-Processors

Effective Date: 10 November 2025

Replaces previous version dated 3 March 2022

Overview

To operate our Services securely and reliably, Medtribe Ltd ("Medtribe", "we", "us", or "our") engages a small number of trusted third-party providers ("sub-processors") that process personal data on our behalf.

We only use sub-processors that:

Meet security, privacy, and compliance standards consistent with UK GDPR and EU GDPR;
Operate under written data-processing terms; and
Provide appropriate technical and organisational safeguards, including, where required, Standard Contractual Clauses (SCCs) for international transfers.

This list reflects our current sub-processors and may change as our Services evolve.

1. Infrastructure and Hosting

Provider	Purpose	Region of Processing	Safeguards
Amazon Web Services (AWS)	Storage	EU / UK (Ireland and London regions)	Data remains in EU/UK data centres
Heroku	Primary hosting and infrastructure	EU / UK (Ireland and London regions)	Data remains in EU/UK data centres
Cloudflare Inc.	Content delivery network (CDN) and security	Global (edge network)	SCCs and regional routing controls

2. Authentication and Communications

Provider	Purpose	Region of Processing	Safeguards
Google Auth	User authentication and account security	EU / US	SCCs and Google DPA
SendGrid (Twilio Inc.)	Transactional email delivery and notifications	UK	SCCs under Twilio DPA

3. Payments and Subscription Management

Provider	Purpose	Region of Processing	Safeguards
Stripe Payments Europe Ltd	Payment processing and subscription billing	EU (Ireland); limited US processing	SCCs and PCI DSS Level 1 compliance

4. Marketing and Consent Tools

Provider	Purpose	Region of Processing	Safeguards
Loops	Opt-out email communications and marketing automation	US / EU	SCCs and GDPR-compliant processing
TermsFeed	Cookie banner and consent management	US / EU	SCCs and DPA in place

Updates

We review our sub-processors periodically and update this page as needed.

Material changes are communicated to organisational customers where required by agreement.

The "Last Updated" date above reflects the most recent revision.

Contact

Email: support@medtribe.com