SafeTrace sub-processors
Version 0.1 (draft for legal review), 13 October 2026.
These are the third parties that may process Customer Personal Data on Medicore's behalf in providing SafeTrace. We give 30 days' notice before adding or replacing one (Data Processing Agreement, clause 6).
Every entry marked [CONFIRM] must be checked against the provider's current DPA, region settings and transfer mechanism before publication.
| Sub-processor | Purpose | Data processed | Location | Transfer mechanism | When used |
|---|---|---|---|---|---|
| Supabase, Inc. | Database, authentication and file storage | All Customer Data | EU: eu-west-1 (Ireland) | Data stays in the EU. For support access from outside the EEA: SCCs [CONFIRM] | Always |
| Vercel Inc. | Application hosting and content delivery | Request data and pages in transit; logs | Server functions in dub1 (Dublin); global edge network [CONFIRM] | EU-US Data Privacy Framework and/or SCCs [CONFIRM] | Always |
| Resend (Plus Five Five, Inc.) | Transactional email (invitations, reports, reminders and digests) | Recipient name and email; the email's short content and any report it carries | [CONFIRM: EU region or US] | SCCs / Data Privacy Framework [CONFIRM] | When email is configured |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error data, with personal data scrubbed and record content excluded | [CONFIRM: EU region] | SCCs [CONFIRM] | When error monitoring is configured |
| Stripe Payments Europe, Ltd. | Subscription billing | Billing contact, organisation name, payment status (card details are handled by Stripe directly) | Ireland, with transfers to Stripe, Inc. (US) | SCCs and the Data Privacy Framework [CONFIRM] | Paid plans |
| Anthropic, PBC | Analyser photo capture: reading measured values from a photo of an analyser screen or printout (Claude API) | The photo (no patient data is expected; users are told to keep it out of the picture), the run's measurement step titles, units and limits | US [CONFIRM] | SCCs [CONFIRM]; no training on API data under Anthropic's commercial terms [CONFIRM]; retention [CONFIRM] | Conditional: only when SafeTrace is configured for it (ANTHROPIC_API_KEY) and an owner or quality manager has switched photo capture on for the organisation, and only for photos an engineer chooses to read |
Report signing (M12b) uses the organisation's own certificate inside SafeTrace: no signing provider is involved. Recall matching reads public sources (openFDA, GOV.UK for MHRA, HPRA) and sends them no Customer Data, so they are not sub-processors.
The SafeTrace website (safetrace.ie) uses no analytics or advertising services.
Affiliates of Medicore that process Customer Personal Data: none at present [CONFIRM].