Sub-Processors

Last updated

Version history

Language

This document identifies the Approved Sub-Processors that will process Personal Data on the Controller’s behalf in connection with the Services. The external Approved Sub-Processors and their relevant Processing details are set out in Section (A). The intra-group Approved Sub-Processors and corresponding details are set out in the then-current list referenced in Section (B). 

(A) External Approved Sub-Processors 

Approved Sub-processor

Purpose of processing

Categories of Personal Data

Applicable transfer mechanism

Storage location(s)

Legal entity and registered address

Microsoft Azure

Core cloud infrastructure and platform services for the Service, and AI models and related processing services.

Identification and contact data;

Account and usage data;

Health-related data;

Recording and documentation data;

Communication data;

Personalization and configuration data.

EU-US Data Privacy Framework or EU Commission’s Standard Contractual Clauses.

EU-US DPF status available here.

Microsoft Cloud Data Centre in the EU,

EU Data Boundary

Microsoft Ireland Operations Limited.

One Microsoft Place, South County Business Park, Dublin 18, Ireland

Eleven Labs

Processing of audio data provided by the Processor exclusively for the purpose of providing speech-to-text services (transcription) and related language processing services.

Identification and contact data;

Health-related data;

Recording and documentation data.

EU-US Data Privacy Framework or EU Commission’s Standard Contractual Clauses.

EU-US DPF status available here.

EU/EEA

Eleven Labs, Inc.

169 Madison Ave #2484, New York, NY 10016, United States

Snowflake

Cloud-based data storage and analytics used for storage, processing and analysis of platform data.

Identification and contact data;

Account and usage data.


EU/EEA

Snowflake Computing Netherlands B.V.

FOZ Building
Gustav Mahlerlaan 300–314
1082 ME Amsterdam
The Netherlands

Intercom

Customer support, in-product messaging and support communication services.

Identification and contact data;

Account and usage data;

Support data.

EU Commission’s Standard Contractual Clauses.

For intra-group transfers to the US, the EU-US Data Privacy Framework is applicable (status available here)

EU/EEA

Intercom R&D Unlimited Company

124 St Stephen's Green,
Dublin 2, D02 C628, Ireland

(B) Intra-Group Approved Sub-Processors 

In addition to the external Approved Sub-Processors listed in Section (A), the Processor may engage the affiliates listed in the Processor’s Trust Centre at trust.tandemhealth.ai as Approved Sub-Processors. The Processor may update the list from time to time, subject to the notification and objection procedure set out in the DPA. The then-current list shall apply for the purposes of the DPA without requiring an amendment to this document.