Sub-processors
Last updated: 20 October 2026
Softlab Software Solutions Limited, trading as ClinicPro, uses the service providers below to help run ClinicPro and ClinicPro+. Each one only processes personal data to provide its service to us, under a written contract with data protection obligations. For ClinicPro+ clinics, these are the sub-processors authorised under our Data Processing Agreement.
Our own infrastructure
The application, database and document storage run on servers owned and managed by Softlab in its own data centre in Ireland, with no third party involved, so they are not a sub-processor. Our video server is managed by Softlab on an OVHcloud server in France (listed above). Encrypted backups of the database and files are made every day to a second OVHcloud server in the European Union, also managed by Softlab and reachable only from our data centre.
Third-party sub-processors
| Provider | Purpose | Personal data | Location | Safeguards |
|---|---|---|---|---|
| Cloudflare Cloudflare, Inc. | Network in front of the Service: DNS, TLS (HTTPS), caching, protection against attacks, and the Turnstile bot check on sign-in, registration and password reset. | All web and app traffic passes through it, including IP addresses, device and browser data, and the content of requests and pages while in transit. | Global network; company based in the United States. | Data Processing Addendum; EU–US Data Privacy Framework; Standard Contractual Clauses. |
| Stripe Stripe Payments Europe, Limited (Ireland), with Stripe, Inc. | Payments for online consultations (Stripe Connect), ClinicPro+ subscriptions, and practitioner payouts and identity checks. | Name, email, payment card and transaction data (entered directly with Stripe), practitioner identity and bank details. | European Union (Ireland), with transfers to the United States. | Data Processing Agreement; EU–US Data Privacy Framework; Standard Contractual Clauses. Stripe is also an independent controller for some processing. |
| Email delivery Brevo — Sendinblue SAS (France) | Sending service emails: account links, appointment and medication reminders, invoices and notifications. | Recipient name and email address, and the content of the email (which can include appointment times or medication names). | European Union (France, Germany, Belgium). | Data Processing Agreement (Brevo terms of use). Inside the EU, no transfer safeguards needed. |
| OVHcloud OVH SAS (France) | Two cloud servers managed by Softlab: one runs our own video consultation service (meet.clinicpro.ie, consultations are never recorded); the other receives our daily backups, already encrypted before they leave our data centre. | Video: audio and video of the consultation while it happens and the participant names shown in the room. Backups: encrypted copies of the database and files. | European Union. | Data Processing Agreement (OVHcloud contract). Inside the EU, no transfer safeguards needed. |
| Apple Push Notification service Apple Inc. / Apple Distribution International Ltd. | Delivering notifications to the ClinicPro iOS app. | Device push token and the notification title and text (which can include a medication name). | United States and global. | EU–US Data Privacy Framework; Standard Contractual Clauses. |
| Firebase Cloud Messaging Google LLC / Google Ireland Limited | Delivering notifications to the ClinicPro Android app. | Device push token and the notification title and text (which can include a medication name). | United States and global. | EU–US Data Privacy Framework; Standard Contractual Clauses. |
| Browser push services The push service of the browser you use (for example Google, Mozilla, Apple or Microsoft) | Delivering web notifications, only if you switch them on in your browser. | Push subscription address and an encrypted notification that the push service cannot read. | Depends on your browser vendor. | Message content is encrypted end to end (RFC 8291); the provider’s own terms apply. |
| BulkGatePlanned TOPefekt s.r.o. — BulkGate (Czech Republic) | SMS to patients of ClinicPro+ clinics: appointment confirmations and reminders, and notices that a result or an invoice is ready in the app. | Patient mobile number and the text of the SMS (kept by BulkGate for up to 12 months); passed to mobile network operators to deliver it. | European Union (mainly the Czech Republic). | BulkGate Data Processing Terms (GDPR Article 28), accepted with our account. Inside the EU, no transfer safeguards needed. |
Other services on our website
Our website loads its fonts from Google Fonts (Google Ireland Limited / Google LLC), so your browser sends your IP address and browser details to Google when a page loads. No account or health data is shared with Google Fonts.
Changes to this list
We update this page before we add or replace a sub-processor. ClinicPro+ clinics are told at least 30 days in advance by email and may object on reasonable data protection grounds, as set out in the Data Processing Agreement. To receive notice or ask a question, contact [email protected].
See also our Privacy Policy and Terms of Service.