1. Controller and processor context

For clinical workspace data, the customer is usually the controller and Psychiatry Ink Ltd is usually the processor. The providers below may act as sub-processors depending on which features the customer uses.

For account, billing, website, and business-administration data, some providers may act as independent controllers or processors depending on their role and contract.

2. Current sub-processors

Google Cloud — hosting, infrastructure, logging, deployment, storage, and compute. Data categories: application data, logs, metadata, and encrypted content where applicable. Processing location: European Union (region-restricted deployment, e.g. Frankfurt, where configured). Safeguards: DPA in place; region-restricted deployment where configured.

Supabase — database, authentication, storage, and backend services. Data categories: account data, application data, metadata, and encrypted content where applicable. Processing location: European Union (Frankfurt). Safeguards: DPA in place; production region confirmed in the EU.

Stripe — payments, subscriptions, billing, invoices, and tax metadata. Data categories: billing contact data, payment metadata, and invoice data. Processing location: global / provider-controlled. Safeguards: Stripe may act as an independent controller for some payment processing.

Google Workspace — business email, support inbox, and administrative communication. Data categories: emails, contact messages, and attachments voluntarily provided. Processing location: European Union / provider-controlled. Safeguards: patient data should not be sent by email unless authorised.

Resend (operated by Resend, Inc.) — transactional and system email delivery (for example account confirmation, password reset, and notification emails). Data categories: recipient email addresses, email content and subject lines, and delivery metadata. Processing location: United States (third-country transfer); infrastructure operated on Amazon Web Services (AWS). Safeguards: DPA in place; transfers to the USA are safeguarded under the EU Standard Contractual Clauses (and the EU–US Data Privacy Framework where applicable).

3. Feature-specific AI sub-processors

These providers are used only when the relevant AI feature, model, or mode is enabled. In each case, the data categories are prompts, selected text, generated output, and model metadata, and identifiers should be minimised before processing.

OpenAI — AI drafting, summarisation, editing, transcription, and clinical text support. Processing location: EU, UK, US, or other countries depending on provider and configuration. Safeguards: used only under an appropriate API/DPA configuration.

Google / Gemini — AI drafting, generation, summarisation, and text support. Processing location: EU, UK, US, or other countries depending on provider and configuration. Safeguards: used only under an appropriate API/DPA configuration.

DeepSeek — AI drafting or economic-model mode. Processing location: depends on provider and configuration. Safeguards: not enabled for production clinical data unless transfer, DPA, and risk assessment are approved.

Mistral AI — AI model processing, where enabled. Processing location: EU, UK, US, or other countries depending on provider and configuration. Safeguards: optional provider, used only under an appropriate API/DPA configuration.

4. Optional or planned providers

The following categories are not currently active in production. We will move a provider into the “Current sub-processors” section only once it is active in production.

• Video consultation or voice-chat infrastructure: optional and country-specific; not currently active in production.
• Error monitoring and diagnostics: not currently active in production.
• Website analytics: none currently active in production.

5. Changes to sub-processors

We may update this page when providers change. Where required by the Data Processing Agreement, we will provide notice of material new sub-processors and allow customers to object on reasonable data-protection grounds within the stated objection period.

6. Customer responsibility

Customers should review this list before using production clinical data and should ensure that use of Psychiatry.Ink, selected AI providers, country settings, and data-transfer safeguards are compatible with their own legal and institutional obligations.