Subprocessors
Subprocessors
Zoravet deliberately keeps its footprint of personal-data-processing vendors small and EU-first. The parties below process data on Zoravet's (and ultimately the clinic's) behalf under a data processing agreement.
| Vendor | Purpose | Data categories | Location | Safeguards |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, compute, database, file storage, backups, secrets and transactional email | All personal-data categories processed by the platform (client, dossier, appointment, message and invoice data), including recipient email addresses and notification content | EU regions (primary Frankfurt, Germany; backup Ireland) | Encryption at rest and in transit (email over STARTTLS), AWS standard data processing addendum |
| Amazon Web Services (Amazon Bedrock) | AI/LLM inference for in-product AI features: breed-name deduplication during data onboarding, and AI-generated medical-history summaries (staff-facing, always human-reviewed) | Dossier/clinical free-text (for summaries) and breed names (for deduplication), sent transiently for inference; medical-history text may contain owner-identifying and health data. Not retained by Bedrock and not used for model training | EU only (eu-central-1, Frankfurt; EU-only cross-region inference) | Covered by the existing AWS data processing addendum + EU Standard Contractual Clauses; data stays in the EU, is not retained, is not used for model training, and is not shared with the model provider — being added to the sub-processor list with 30 days’ advance notice before go-live |
| Google (Firebase Cloud Messaging) | Push-notification delivery to the pet-owner app | Device push token, limited notification payload | Google LLC, US-headquartered — may process outside the EEA | Certified under the EU–U.S. Data Privacy Framework; EU Standard Contractual Clauses as fallback |
| Mollie B.V. — planned, not yet active | Payment processing (pay-by-link for clinic invoices) — hosted checkout only, no card data on our servers | Once active: invoice amount/reference and payment status; never card/PAN data | Netherlands (EU) | Not yet processing data; will be added with 30 days’ advance notice before activation; each clinic uses its own Mollie account (Mollie settles funds directly to the clinic) |
Our own login/identity service is self-hosted by Zoravet on our own EU infrastructure and is not a third-party sub-processor — it is part of our own platform.
Clinics receive at least 30 days advance notice before a new sub-processor is added or replaced, with a right to object on reasonable grounds (see the DPA §3.4).