This page lists the sub-processors we engage to run Seviko, as referenced in our privacy policy and data-processing schedule. We put a written data-protection contract in place with each one and notify account holders before adding or replacing a sub-processor that processes clinic data.
Patient and clinic records are stored in the UK. Some sub-processors below are used only for optional features (for example reminders or accounting integrations), and only process data when a clinic enables that feature. Where a provider processes personal data outside the UK, we rely on an appropriate transfer safeguard such as the UK International Data Transfer Addendum.
| Provider | Purpose | Data processed | Processing location |
|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting, database, backups | All Seviko records (clinic, patient, accounting, account data) | UK (London, eu-west-2) |
| Amazon Web Services — Bedrock | Optional AI assistant (Arli) inference | Non-identifiable prompts; no patient-identifiable data by design | UK (London, eu-west-2) |
| Cloudflare | DNS, CDN and object storage (R2) for uploaded documents | Uploaded files and documents; site delivery metadata | EEA (Cloudflare R2, EU jurisdiction) |
| Resend | Transactional and reminder email delivery | Recipient name, email address, message content | US (Resend, on AWS); UK/EU transfers under SCCs/UK IDTA |
| Vonage | SMS and voice reminders (optional) | Recipient name, phone number, appointment details | US & EEA (Vonage infrastructure); SMS delivered globally via carrier networks; transfers under SCCs/UK IDTA |
| WhatsApp / Meta Platforms | WhatsApp message delivery (optional, where enabled) | Recipient phone number, message content | US / Ireland (Meta Platforms); delivered via Vonage |
| Intuit (QuickBooks Online) | Accounting sync — only if the clinic connects it | Invoices, payments, customer/contact and accounting data the clinic syncs | Outside UK, under Intuit's terms |
| Xero | Accounting sync — only if the clinic connects it | Invoices, payments, contact and accounting data the clinic syncs | Outside UK, under Xero's terms |
Intuit and Xero act on the clinic's own authorisation when a clinic connects them; the clinic remains the controller of the data in its QuickBooks company or Xero organisation. See the privacy policy for details.
Changes
We update this page when we add, remove or replace a sub-processor. The “last updated” date above changes accordingly. Material changes affecting clinic data are notified to account holders.
Contact
Questions about our sub-processors: [email protected].
Related: Privacy policy · End-user licence agreement.