Skip to content
psynthia

Sub-processors

Last updated: 2026-10-01

Draft pending legal review: the text may change before its final version.

Providers Psynthia uses to deliver the service that process personal data on behalf of practices, with their role, the data they receive and where they process it.

Their use is governed by the data processing agreement; we give 30 days' notice of any change.

  • Supabase

    Supabase, Inc.
    Purpose
    Database, authentication, file storage and server functions
    Data
    All service data: patients, sessions, audio, transcripts, reports, AI conversations, accounts
    Location
    EU: Ireland (AWS eu-west-1)
    Provider's data protection terms

  • Google Cloud (Vertex AI)

    Google Cloud EMEA Limited
    Purpose
    AI models (Gemini) for the assistant, summaries, notes, reports, diarization and semantic search
    Data
    Clinical text: transcripts, notes, patient data included in the request
    Location
    EU: European multi-region (AI) and Frankfurt, europe-west3 (search)
    Provider's data protection terms

  • OpenAI

    OpenAI Ireland Limited / OpenAI, L.L.C.
    Purpose
    Fallback AI model, only when the primary provider (Vertex AI) fails
    Data
    The same clinical text that would go to Vertex AI
    Location
    United States. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • ElevenLabs

    Eleven Labs, Inc.
    Purpose
    Transcription of session audio
    Data
    Session audio and the resulting transcript
    Location
    United States. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • Deepgram

    Deepgram, Inc.
    Purpose
    Transcription of session audio (alternative, live or batch)
    Data
    Session audio and the resulting transcript
    Location
    United States. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • Resend

    Plus Five Five, Inc. (Resend)
    Purpose
    Email delivery: appointment reminders, bookings, invitations and sign-in
    Data
    Patient and practitioner name and email, appointment date
    Location
    United States. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • Stripe

    Stripe Payments Europe, Limited
    Purpose
    Subscription and credit payments
    Data
    Practitioner billing and payment data (never patient data)
    Location
    EU (Ireland), with possible transfers to the US. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • Netlify

    Netlify, Inc.
    Purpose
    Web app hosting and its server functions
    Data
    App requests in transit (including audio sent for transcription); stores no patient data
    Location
    United States. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • Sentry

    Functional Software, Inc.
    Purpose
    Application error monitoring
    Data
    Technical traces and internal ids; on-screen text and media are masked
    Location
    United States. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms

  • Google Calendar

    Google Ireland LimitedOnly if you turn it on
    Purpose
    Sync with the practitioner's Google Calendar, if turned on
    Data
    Appointment dates and times and patient initials
    Location
    EU, with possible transfers to the US. Transfer covered by standard contractual clauses or the EU-US Data Privacy Framework.
    Provider's data protection terms