Draft, for legal review. This wording has not been approved and is not yet in force.
Sub-processors
Draft dated 25 Oct 2026
These are the companies Praxtic uses to run the service. Each is bound by a written agreement and receives only the data it needs. We'll give practices notice before adding or changing a sub-processor.
| Company | What for | Data | Where |
|---|---|---|---|
| Supabase Inc. | Database, file storage and sign-in | All practice records, staff accounts | UK (London) |
| Lovable Labs and Cloudflare, Inc. | Hosting the app | Data in transit only; nothing stored | Global edge network |
| Amazon Web Services (Amazon Bedrock) | Drafting letters and operation notes | De-identified clinical text only; no names, dates of birth, NHS numbers or contact details. Prompts and outputs are not retained (AWS DPA). | AWS EU regions (Stockholm) |
| Stripe Payments Europe Ltd | Card payments into each consultant's own Stripe account | Invoice number, amount, the card holder's details entered on Stripe's page | UK/EU |
| postcodes.io (Ideal Postcodes) | Checking postcodes | The postcode only | UK |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error details with patient fields removed | EU (Germany) |
The NHS Organisation Data Service is used as a data source for GP practice and hospital details. It receives no personal data.