Subprocessors

Last updated: 14 August 2026

The providers through which the data RivoBase processes for clinics passes, or will pass. The list is public so that every clinic knows whom we place beneath us and can object before a change, as art. 28 of the GDPR requires.

Provider	What for	What data	Where	Status
Cloudify (hosting)	The server the application and the database run on	all platform data	Romania (EU)	active data passes through it today
Anthropic	The language model that formulates the assistant’s replies	the text of the conversation in progress, plus the clinic’s configuration (services, opening hours, prices)	USA — the transfer is made under the standard contractual clauses	active data passes through it today
Meta Platforms (WhatsApp Cloud API)	Delivery of messages over WhatsApp	the phone number and the content of the messages on this channel	EU / USA, under Meta’s terms	ready integrated, but unused until the clinic switches the channel on
Telegram (demo request notifications)	The internal notice that someone has requested a demo from the site	the first name and, if filled in, the clinic name — that is all. Contact details and the message text stay in our database and do not travel over this channel	outside the EU, under Telegram’s terms	active data passes through it today
Google (Calendar)	Syncing appointments into the clinic’s calendar, if the clinic connects it	the time, the service and the name on the appointment	EU / USA	ready integrated, but unused until the clinic switches the channel on
Voice provider (STT/TTS) — not chosen	Speech transcription and synthesis for the phone channel	the voice and the transcript of the call	to be settled once the provider is chosen	not chosen there is no provider yet; no data of any kind goes anywhere
Telephony operator — not chosen	The phone numbers and the call traffic	the caller’s number, the duration	to be settled	not chosen there is no provider yet; no data of any kind goes anywhere

What “ready” means. The code for that channel exists and has been tested, but the channel is not switched on at any clinic — so no real message has passed through it. We put it on the list precisely so that the change of status does not come as a surprise on the day it is turned on.

Changes

Before we add or replace a subprocessor, we notify clinics at least 30 days in advance, at the contact address on the account and by updating this page. A clinic may object within that period.

Transfers outside the EU

The only relevant transfer today is to Anthropic (USA), for the language model: the text of the conversation in progress goes to the model so that the reply can be formulated. It is made on the basis of the European Commission’s standard contractual clauses. The alternative — running the same model in an EU region — remains on the table and is an open architecture decision.