Sub-processors
Last updated: 14 July 2026
Remy (Armada Labs Studio Ltd) uses the third-party service providers below to help us
deliver the Remy platform. Each is a "sub-processor": they may process personal
data on our behalf, only to provide their service to us, and each is bound by a
contract (a Data Processing Agreement) requiring appropriate security and
confidentiality. Where a provider processes data outside the UK/EEA, we rely on
the safeguard shown ("SCCs" = the UK Addendum to the EU Standard Contractual
Clauses; "DPF" = EU-US Data Privacy Framework and UK extension).
Stay informed of changes
We will update this page before adding a new sub-processor that materially
affects how customer data is processed. To be notified of changes, email
privacy@remy.health and ask to join our sub-processor update list.
Core infrastructure
| Provider | Purpose | Region | Transfer safeguard |
|---|
| Supabase | Database, authentication, file storage | London, UK | None needed (UK) |
| Vercel | Application hosting and content delivery | EU/global edge | SCCs (verify) |
Communications
| Provider | Purpose | Region | Transfer safeguard |
|---|
| Twilio | SMS, voice calls, call recording, legacy transcription | Dublin (EU) edge; US parent | SCCs / DPF |
| Postmark (ActiveCampaign) | Transactional and marketing email delivery | US | SCCs / DPF (verify) |
| Google | OAuth sign-in and Gmail mailbox sync (where a practice connects it) | US/global | SCCs / DPF |
| Microsoft | OAuth sign-in and Outlook/Graph mailbox sync (where connected) | EU/US | SCCs / DPF |
AI features
| Provider | Purpose | Region | Transfer safeguard |
|---|
| OpenAI | Call/voicemail transcription (Whisper) | US (OpenAI Ireland Ltd contracting entity) | SCCs + DPF — API data not used for training |
| Anthropic | AI summaries and product AI (Claude) | US | SCCs + DPF — API data not used for training; short retention |
Payments and finance
| Provider | Purpose | Region | Transfer safeguard |
|---|
| Stripe | Subscription billing and card payments | US/global | SCCs / DPF |
| Xero | Accounting / invoice sync (where a practice connects it) | US / NZ | SCCs (verify) |
Optional integrations (only when a customer connects them)
| Provider | Purpose | Region | Transfer safeguard |
|---|
| Cliniko | Practice-management two-way sync (patients, appointments, documents) | UK or AU shard | Depends on shard |
| HubSpot | One-time CRM data import chosen by the customer | US | SCCs / DPF |
Location services
| Provider | Purpose | Region | Transfer safeguard |
|---|
| postcodes.io | UK postcode geocoding | UK | None needed (UK) |
| OpenStreetMap | Map tiles | EU | None needed |
Not currently active but will be listed here if enabled: ElevenLabs (AI voice),
Zoom (phone), Deepgram (enhanced transcription).