Subprocessors
Subprocessors
Zoravet deliberately keeps its footprint of personal-data-processing vendors small and EU-first. The parties below process data on Zoravet's (and ultimately the clinic's) behalf under a data processing agreement.
| Vendor | Purpose | Data categories | Location | Safeguards |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL (AWS) | Hosting, compute, database, file storage, backups, secrets and transactional email | All personal-data categories processed by the platform (client, dossier, appointment, message and invoice data), including recipient email addresses and notification content | EU regions (Germany primary, Ireland backup) | Encryption at rest and in transit, AWS standard data processing addendum |
| Amazon Web Services EMEA SARL (AWS): Amazon Bedrock | AI inference for two uses: (1) the staff-facing AI summary of a pet's medical history, which is off until a clinic switches it on and is always human-reviewed; (2) suggesting which differently spelled breed names mean the same breed when Zoravet migrates a clinic's records from its previous system. The second use has no clinic setting: it is part of every migration Zoravet carries out, and its suggestions are confirmed or changed by the person running the migration before they are applied | For summaries: the animal's medical history for the chosen period, sent transiently for inference; that text may contain owner-identifying data and animal health data (not special-category data under GDPR Art. 9). For breed names: only the breed spellings and their species, with no owner, pet or dossier details. Not retained by the AI service and not used for model training | EU only (inference restricted to EU regions) | Covered by the existing AWS data processing addendum + EU Standard Contractual Clauses; data stays in the EU, is not retained, is not used for model training, and is not shared with the model provider |
| Google (Firebase Cloud Messaging) | Push-notification delivery to the pet-owner app | Device push token, limited notification payload | Google LLC, US-headquartered, may process outside the EEA | Certified under the EU–U.S. Data Privacy Framework; EU Standard Contractual Clauses as fallback |
| Mollie B.V. (planned, not yet active) | Payment processing (pay-by-link for clinic invoices): hosted checkout only, no card data on our servers | Once active: invoice amount/reference and payment status; never card/PAN data | Netherlands (EU) | Not yet processing data; will be added with 30 days’ advance notice before activation; each clinic uses its own Mollie account (Mollie settles funds directly to the clinic). Mollie is already used, separately, for Zoravet's own subscription billing to clinics; that use does not involve any clinic patient or client data. |
Our own login/identity service is self-hosted by Zoravet on our own EU infrastructure and is not a third-party sub-processor. It is part of our own platform.
Clinics receive at least 30 days advance notice before a new sub-processor is added or replaced, with a right to object on reasonable grounds (see the DPA §3.4).