This document identifies the Approved Sub-Processors that will process Personal Data on the Controller’s behalf in connection with the Services. The external Approved Sub-Processors and their relevant Processing details are set out in Section (A). The intra-group Approved Sub-Processors and corresponding details are set out in the then-current list referenced in Section (B).
(A) External Approved Sub-Processors
Approved Sub-processor | Purpose of processing | Categories of Personal Data | Applicable transfer mechanism | Storage location(s) | Legal entity and registered address |
|---|---|---|---|---|---|
Microsoft Azure | Core cloud infrastructure and platform services for the Service, and AI models and related processing services. | Identification and contact data; Account and usage data; Health-related data; Recording and documentation data; Communication data; Personalization and configuration data. | EU-US Data Privacy Framework or EU Commission’s Standard Contractual Clauses. EU-US DPF status available here. | Microsoft Cloud Data Centre in the EU, EU Data Boundary | Microsoft Ireland Operations Limited. One Microsoft Place, South County Business Park, Dublin 18, Ireland |
Eleven Labs | Processing of audio data provided by the Processor exclusively for the purpose of providing speech-to-text services (transcription) and related language processing services. | Identification and contact data; Health-related data; Recording and documentation data. | EU-US Data Privacy Framework or EU Commission’s Standard Contractual Clauses. EU-US DPF status available here. | EU/EEA | Eleven Labs, Inc. 169 Madison Ave #2484, New York, NY 10016, United States |
Snowflake | Cloud-based data storage and analytics used for storage, processing and analysis of platform data. | Identification and contact data; Account and usage data. | EU/EEA | Snowflake Computing Netherlands B.V. FOZ Building | |
Intercom | Customer support, in-product messaging and support communication services. | Identification and contact data; Account and usage data; Support data. | EU Commission’s Standard Contractual Clauses. For intra-group transfers to the US, the EU-US Data Privacy Framework is applicable (status available here) | EU/EEA | Intercom R&D Unlimited Company 124 St Stephen's Green, |
(B) Intra-Group Approved Sub-Processors
In addition to the external Approved Sub-Processors listed in Section (A), the Processor may engage the affiliates listed in the Processor’s Trust Centre at trust.tandemhealth.ai as Approved Sub-Processors. The Processor may update the list from time to time, subject to the notification and objection procedure set out in the DPA. The then-current list shall apply for the purposes of the DPA without requiring an amendment to this document.