Subprocessors
MDCare uses a small number of third parties to run the service. This is all of them, what each one is for, and what customer data each one can see.
Under the processing agreement we give customers notice before a new subprocessor begins processing their data, so entries appear on this list before they are in use. The status column says which is which.
| Subprocessor | Purpose | Data processed | Location | Status |
|---|---|---|---|---|
| Hostinger International Ltd | Virtual server hosting: the application and the database | All customer data, this being the machine the service runs on | Germany (EU) | In use |
| Stripe Payments Europe Ltd | Subscription billing and payment processing | Billing contact name, email address, organisation name and billing address. No device, maintenance or measurement data. | Ireland, with onward transfer to the United States | Not engaged |
| Delivery of service email: invitations, password resets, alerts | Recipient email address and the content of the message, which may name a device and the date a maintenance falls due. | — | Not engaged | |
| Functional Software, Inc. (Sentry) | Error monitoring | Stack traces, the URL path and the release identifier. Personal data is deliberately not sent. | United States | Not engaged |
| Object storage for uploaded maintenance reports and for off-site database backups | Uploaded documents and complete database backups. | — | Not engaged |
Transfers outside Switzerland and the EU
Stripe and Sentry are reached from outside the European Economic Area. Transfers to them rely on the European Commission's standard contractual clauses, with the Swiss addendum recognised by the Federal Data Protection and Information Commissioner, together with the supplementary measures those providers publish.
Neither receives device, maintenance or measurement data. Stripe receives billing contact details. Sentry receives stack traces with personal data collection switched off.
Changes to this list
We will publish a change here, and notify the billing contact of each affected customer, before a new subprocessor starts processing customer data. A customer who objects on reasonable data protection grounds may terminate the affected part of the service, as set out in the processing agreement.