Where your data lives
The region, the sub-processors, the one route that leaves it, and how clinics are kept apart.
The database, file storage and application servers run on Google Cloud in europe-west1 — St. Ghislain, Belgium. That is the primary location for both your account data and your clinical records.
| Sub-processor | What it does | Where |
|---|---|---|
| Google Cloud / Firebase | Database, file storage, authentication, hosting | europe-west1 (Belgium) |
| Resend | Transactional email — confirmations, reminders, sign-in links | us-east-1 (United States) |
Transactional email means a recipient address and the contents of that message reach the United States. Where a transfer needs a legal mechanism, the Standard Contractual Clauses cover it, with the UK Addendum or the Swiss amendments where those apply.
If you practise in Türkiye, the transfer is regulated under KVKK art. 9 and needs its own instrument — the clauses above do not stand in for it. Write to us before you enter patient data and we will handle it with you.
Isolation between clinics
Enforced in the database rules, not in the application code that queries them. A request without a valid membership for a clinic cannot read that clinic's data even if the code above it asks wrongly.
The distinction matters more than it sounds. Application-level checks fail when someone writes a query that forgets one; a rule that runs on every read and write does not have an "unless somebody forgot" case.
What we do not do
- We do not use your clinical data to train models.
- We do not sell personal data, and we do not buy it.
- We do not run advertising or third-party analytics trackers on our marketing site.
- We do not act on a patient request about your records — we send them to you and tell you they asked.
Your side of it
You are the controller; we are the processor. Having a lawful basis for the data you enter, giving your patients the notices your regulator requires, and holding whatever consents apply where you practise are yours. The Data Processing Agreement sets out the rest.
Common questions
- Can I choose a different region?
- Not today — one region, in the EU. If your regulator requires data to stay in a specific country, tell us before you sign rather than after.
- Do your staff access our data?
- Only to operate the service and answer support requests. Because that access is from outside the EEA, an EEA clinic should treat it as a restricted transfer — which is why the transfer clauses cover access, not just the email route.