1. Controller and processor context

For clinical workspace data, the customer is usually the controller and Psychiatry Ink Ltd is usually the processor. The providers below may act as sub-processors depending on which features the customer uses.

For account, billing, website, and business-administration data, some providers may act as independent controllers or processors depending on their role and contract.

2. Current sub-processors

Google Cloud — hosting, infrastructure, logging, deployment, storage, and compute. Data categories: application data, logs, metadata, and encrypted content where applicable. Processing location: European Union (region-restricted deployment, e.g. Frankfurt, where configured). Safeguards: DPA in place; region-restricted deployment where configured.

Supabase — database, authentication, storage, and backend services. Data categories: account data, application data, metadata, and encrypted content where applicable. Processing location: European Union (Frankfurt). Safeguards: DPA in place; production region confirmed in the EU.

Stripe — payments, subscriptions, billing, invoices, and tax metadata. Data categories: billing contact data, payment metadata, and invoice data. Processing location: global / provider-controlled. Safeguards: Stripe may act as an independent controller for some payment processing.

Google Workspace — business email, support inbox, and administrative communication. Data categories: emails, contact messages, and attachments voluntarily provided. Processing location: European Union / provider-controlled. Safeguards: patient data should not be sent by email unless authorised.

Resend (operated by Resend, Inc.) — transactional and system email delivery (for example account confirmation, password reset, and notification emails). Data categories: recipient email addresses, email content and subject lines, and delivery metadata. Processing location: United States (third-country transfer); infrastructure operated on Amazon Web Services (AWS). Safeguards: DPA in place; transfers to the USA are safeguarded under the EU Standard Contractual Clauses (and the EU–US Data Privacy Framework where applicable).

2a. Processing locations for the India edition

For accounts on the India edition (in.psychiatry.ink and app.in.psychiatry.ink), the following applies in addition to, or instead of, the locations above:

Google Cloud — hosting, compute, logging, and deployment for the India edition run in Mumbai (asia-south1). The public site and app are delivered through Google’s global HTTPS load balancer (TLS terminated at Google’s edge), which fronts the Mumbai service.

Supabase — database, authentication, and storage for India-edition accounts run in Mumbai (AWS ap-south-1). Patient data for India-edition accounts is hosted in India.

Meta Platforms — the WhatsApp Business Platform transports messages for India Pro organisations that connect a clinic number (message content is additionally stored encrypted at rest by us; consent, retention, and withdrawal follow the workspace’s WhatsApp consent model).

AI providers — for the India edition, clinical text is de-identified before any AI model is contacted; de-identified prompts may be processed by OpenAI, Google/Gemini, or Mistral AI outside India under their respective DPAs. DeepSeek is not enabled for the India edition.

Stripe (payments) and Google Workspace / Resend (email) are unchanged from section 2.

3. Feature-specific AI sub-processors

These providers are used only when the relevant AI feature, model, or mode is enabled. In each case, the data categories are prompts, selected text, generated output, and model metadata, and identifiers should be minimised before processing.

OpenAI — AI drafting, summarisation, editing, transcription, and clinical text support. Processing location: EU, UK, US, or other countries depending on provider and configuration. Safeguards: used only under an appropriate API/DPA configuration.

Google / Gemini — AI drafting, generation, summarisation, and text support. Processing location: EU, UK, US, or other countries depending on provider and configuration. Safeguards: used only under an appropriate API/DPA configuration.

DeepSeek — AI drafting or economic-model mode. Processing location: depends on provider and configuration. Safeguards: not enabled for production clinical data unless transfer, DPA, and risk assessment are approved.

Mistral AI — AI model processing, where enabled. Processing location: EU, UK, US, or other countries depending on provider and configuration. Safeguards: optional provider, used only under an appropriate API/DPA configuration.

4. Optional or planned providers

The following categories are not active for the clinical service in production, except where noted. We will move a provider into the “Current sub-processors” section only once it processes customer data as a sub-processor in production.

• Video consultation or voice-chat infrastructure: optional and country-specific; not currently active in production.
• Error monitoring and diagnostics: not currently active in production.
• Website analytics: Google Analytics 4 (Google Ireland Limited) runs on the public marketing pages only, based on visitor consent. It is not a sub-processor for clinical data: it is never active in the logged-in workspace and never receives customer or patient content (see the Cookie Policy).
• Advertising measurement: the Meta Pixel (Meta Platforms Ireland Limited) and Google Ads conversion measurement (Google Ireland Limited) run on the public marketing pages only, based on visitor marketing consent. They are not sub-processors for clinical data: they are never active in the logged-in workspace and never receive customer or patient content (see the Cookie Policy).

5. Changes to sub-processors

We may update this page when providers change. Where required by the Data Processing Agreement, we will provide notice of material new sub-processors and allow customers to object on reasonable data-protection grounds within the stated objection period.

6. Customer responsibility

Customers should review this list before using production clinical data and should ensure that use of Psychiatry.Ink, selected AI providers, country settings, and data-transfer safeguards are compatible with their own legal and institutional obligations.