Data Processing and Hosting
Hosting location and processing arrangements are agreed per deployment and recorded in the contract. This page explains the categories involved so your compliance team can assess them.
Deployment and hosting
- Cloud deployment: managed hosting with the region agreed with the customer
- On-premise deployment: the customer hosts and controls the infrastructure
- Hybrid deployment: components split by agreement, documented per facility
Categories of sub-processor
- Managed database, authentication and application hosting
- Transactional email delivery for account and appointment notifications
- AI model services for documentation assistance, where enabled
- Speech-recognition services for voice-to-note, where enabled
- Payment providers, where online payment collection is enabled
Contractual controls
- A data processing agreement is signed before production use
- Sub-processors are named in the agreement for the deployment concerned
- Cross-border transfer arrangements are documented where applicable
- Customers are notified of material changes to sub-processors
Customer dependencies
- The definitive, named sub-processor list and hosting regions must be confirmed by Ubora One Limited before publication as a contractual document.
MedFlow home — Contact Ubora One Limited