Sub-processors
To deliver Marlmed we rely on a small number of trusted providers ("sub-processors") that process personal data on our behalf, in line with our Data Processing Agreement. This is the current list. We notify clients at least 14 days before a new sub-processor begins processing their data.
Last updated: July 2026
| Sub-processor | What they do | Where data is processed | Data involved |
|---|---|---|---|
| DigitalOcean, LLC | Cloud hosting: production database, application servers, and encrypted backups (backups held within the UK region). | London (lon1) data centre, United Kingdom. No restricted transfer. | All personal data categories processed by the platform. |
| Resend Inc. | Transactional email delivery (trial reminders, low-stock and controlled-drug alerts, password resets). | EU / US (built on AWS SES). Restricted transfer under the UK Addendum to the EU SCCs. | Recipient email address and name, and the content of the email. |
| Stripe Payments Europe, Limited | Subscription billing and card payment processing. Stripe acts as our processor for billing, and as an independent controller for fraud prevention, regulatory and payment-operation activities (per Stripe’s own terms). | EU / UK. Restricted transfer under Stripe’s SCCs / UK Addendum. Marlmed never sees card numbers. | Billing contact name and email. Never full card numbers. |
| Cloudflare, Inc. | DNS, reverse proxy, TLS termination, and DDoS protection at the network edge. | Global edge network. Restricted transfer under the UK Addendum to the EU SCCs. | Network and request information passing through the reverse proxy: IP address, user agent, requested URL, HTTP headers, and transient request/response content. Cloudflare is not used as a database or data store. |
| Anthropic PBC (opt-in only) | AI-assisted parsing of stock-receipt images via the Anthropic API, where a clinic opts in. API inputs and outputs are not used to train models; a zero-data-retention arrangement is used where available. | United States. Restricted transfer under the UK Addendum to the EU SCCs. | Receipt image content (product, SKU, quantity, price). Marlmed does not intentionally submit patient or clinical information, and customers are instructed not to include patient information in receipt images, though images may contain incidental personal information supplied by the customer. |
International transfers
Personal data for UK clients is stored and processed in the UK. Where a sub-processor processes data outside the UK, that restricted transfer is covered by a valid UK mechanism - a UK adequacy decision, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, together with any required transfer risk assessment. The mechanism used for each non-UK provider is shown in the "Where data is processed" column above.
Changes and objections
We keep this page current. If we add a new sub-processor, we update this list at least 14 days before it begins processing your data. If you object to a new sub-processor on reasonable grounds, you may terminate the affected service on written notice, with a pro-rata refund of any pre-paid fees. Questions: [email protected].