Sub-processors

MedLink maintains a documented list of sub-processors handling personal data and has established formal agreements governing their use.

Current Sub-processors

Name	Purpose	Location
Amazon	Amazon Web Services (AWS) is used for patient communication via SMS, voice call, email	UK
Google	MedLink is hosted in Google Cloud Platform (GCP). This provides secure storage of all personal data	UK
Sentry	For error reporting in the MedLink infrastructure	EU*
Gov Notify	A government digital service available to the NHS that MedLink uses for patient communication via SMS, email and letter	UK

*Sentry relies on the EU-U.S. Data Privacy Framework

Sub-processor Agreements

MedLink commits to:

Executing Sub-Processing Agreements imposing identical obligations on sub-processors as those in the Data Processing Agreement
Permitting both processor and controller to enforce obligations
Ensuring full compliance with data protection legislation

Appointment Process

Healthcare organisations with executed Data Processing Agreements receive notice via this webpage of sub-processor updates. MedLink maintains current information to inform customers of sub-processing scope.

Per the Data Protection Act, organisations can object in writing within 30 days, describing legitimate reasons. Non-objection constitutes acceptance.

Contact

Questions can be directed to: privacy@medlink.co.uk