Sub-processor Register

Sub-processor register

This is Annex C of the relay Data Processing Agreement, the relay Business Associate Agreement, the POPIA operator schedule, and the Cloud edition's data-processing instruments. It lists every third party that hosts or carries practice data on our behalf for the hosted editions. The installed software uses none of them: clinical records live in an encrypted database on the practice's own machines, and the hosted editions store only content that is encrypted before it reaches us and that we cannot read.

How changes are notified

We give the practice's administrative contact 30 days' notice before a new sub-processor starts processing its data, with a right to object. If an objection cannot be resolved, the practice may end the affected service and retrieve its data under the portability floor in the relay DPA §8. Every change is recorded in the change log at the end of this page.

Sub-processors

Sub-processor	Service it provides	What it can see	Where
Amazon Web Services	Infrastructure hosting for the sync relay, the patient portal service, and the Cloud edition's regional pods (compute, storage, networking, key-management for our own service keys, monitoring)	End-to-end-encrypted content the operator cannot read, plus the service metadata inventoried in the relay DPA Annex A. Cloud-edition records are client-side encrypted before storage.	Cloud edition: the region pod the practice selects, never moved. Relay tiers: the United States (AWS us-east-1).
Apple Inc. — Apple Push Notification service	Delivery of push notifications to enrolled iPhones	The device's push token, a content-free notification payload (a fixed alert text, an opaque record identifier, and a count — never names or clinical content, enforced by automated test), and delivery metadata	Apple's infrastructure (United States)

A server-side AI provider would appear here before any practice could opt into server-side inference; today every AI feature runs on the practice's own devices and no such provider exists.

Parties that are not sub-processors

These receive personal information for their own purposes or directly from your device, so they are disclosed in the Privacy Policy rather than listed as processors acting for us:

• Paddle — merchant of record for purchases; an independent controller for payment, tax and invoicing data.
• Hugging Face — the download source your own device contacts directly for the optional on-device AI model.
• The platform app stores (Microsoft Store, Mac App Store, Apple App Store) — distributors of the apps under their own developer terms, including any store telemetry.

Change log

Date	Change
2026-09-08	First published version of the register.
2026-09-12	Relay hosting region stated: the United States (AWS us-east-1). The review notice at the top of the register was removed; the parties listed are unchanged.

---

SideClick (Pty) Ltd · privacy@sideclick.io Version 1.1 · Published 2026-09-12