Last updated: September 4, 2026
Subprocessors
Saitooth uses these subprocessors to provide the platform. All are bound by data protection duties at least equivalent to the Data Processing Agreement. This page is updated before integrating providers receiving personal data.
| Provider | Purpose | Data processed |
|---|---|---|
| Supabase | PostgreSQL databases and clinical document storage. | Service data (clinical records and linked documents) and account data.Infraestructura cloud (puede implicar transferencias internacionales). |
| Vercel | Platform hosting and execution. | Data needed to serve the application and technical usage logs.Infraestructura cloud (puede implicar transferencias internacionales). |
| Resend | Transactional email (account verification, two-factor authentication and service notifications). | Email addresses and transactional message content.Infraestructura cloud (puede implicar transferencias internacionales). |
| Cloudflare (Turnstile) | Bot protection and form traffic verification. | Technical session signals needed for verification (no clinical data).Infraestructura cloud (puede implicar transferencias internacionales). |
Health data (sensitive personal data) is processed under Client instructions as Controller, per the DPA. For roles and rights, see the Privacy policy and the page on Data protection rights.