Sub-processors
The service providers that process data for VirtualDoc. Practices are told at least 30 days before a new one is used.
In use
| Name | Purpose | Data | Location | From |
|---|---|---|---|---|
| Supabase | Database, authentication and file storage | All practice and patient records, encrypted at rest; sensitive fields also encrypted with a key per practice | United Kingdom (London, AWS eu-west-2) Pending the POPIA section 72 position (OQ-V03, WP0.3) | 21 Oct 2026 |
| Vercel | Application hosting and serverless functions | Requests in transit; no records stored | United Kingdom (London, lhr1) Pending the POPIA section 72 position (OQ-V03, WP0.3) | 21 Oct 2026 |
Announced changes
None announced.