Document Sub-processor list (DPA Annex C)Version 0.1Status draft (pending legal review)Effective To be filled · Effective dateFP 115824875e0aAccepted as part of the Data Processing Agreement
The companies that process patient data for Airgent, what each does and where. Changes follow DPA §8.3
(30 days' notice). Built from the code on 2026-10-05; evidence paths are in
docs/compliance/2026-10-05-agreement-risk-register.md §7.
2 SECTIONS · TAP TO READ
| Company | What it does | Patient data it handles | Where |
|---|---|---|---|
| Supabase | main database, sign-in, file storage | all Service data | India (Mumbai) |
| Vercel | runs the web app and its server functions | all Service data, in transit and processing | functions in India (Mumbai); logs and edge delivery may be outside India Pending · P13 |
| Google Cloud | runs our backend services, workflow engine and monitoring servers | all Service data, including audio | India (Mumbai) |
| Amazon Web Services (Bedrock) Pending · P10 | AI models: drafting clinical notes; the voice receptionist | consultation transcripts; call content | To verify · India (Mumbai) or USA for note drafting; voice: Asia-Pacific region |
| ElevenLabs | speech-to-text for consultations and WhatsApp voice notes; agent voice | consultation audio; patient voice notes | USA |
| Anthropic | AI model for the WhatsApp assistant and patient intake; fallback model for drafting clinical notes | WhatsApp conversations; intake answers; consultation transcripts when the fallback is used | USA |
| Sarvam AI | speech-to-text (and optionally voice) for phone calls | call audio | India |
| Plivo Pending · P10 | phone calls and WhatsApp delivery | patient phone numbers, call audio, WhatsApp messages | USA To verify · processing region |
| Meta (WhatsApp) | WhatsApp network | phone numbers and message content in transit | global |
| Sentry | error reports | none by design (error types only; a field allowlist blocks other data) | USA |
| Company | What it does | Where |
|---|---|---|
| sign-in; calendar sync (appointment times only, no patient details) | global | |
| Apple | Sign in with Apple | global |
| Cloudflare | bot check at sign-in; secure tunnel to our integration server | global |
| Brevo | account emails to clinic users | EU |
| Razorpay | payments Pending · P11: not integrated yet | India |
Document Sub-processor list (DPA Annex C)Version 0.1Status draft (pending legal review)Effective To be filled · Effective dateFP 115824875e0aAccepted as part of the Data Processing Agreement