Sub-Processors

We work with trusted sub-processors to provide our services. Below you can find information about our main sub-processors and their GDPR compliance.

Last updated: 19 September 2026

AWS

Amazon Web Services (AWS) provides cloud infrastructure services that we use to host and run our application.

AWS is GDPR compliant and provides data processing agreements that meet GDPR requirements. They implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

PostHog

PostHog is an open-source product analytics platform that we use to understand how our users interact with our application.

PostHog is GDPR compliant and provides data processing agreements. They process data within the EU and implement appropriate security measures to protect personal data.

Google Workspace

We use Google Workspace, provided by Google Ireland Limited, for business email, documents and internal collaboration. Customer personal data is not stored or processed in Google Workspace as part of the Silverwise service. Personal data may be received incidentally where a customer includes it in support correspondence sent to us by email. Google processes this data under the Google Workspace Data Processing Addendum, which incorporates the European Commission's standard contractual clauses.

Microsoft Azure OpenAI Service

Microsoft Azure OpenAI Service provides AI inference used to assist with text cleanup in care documentation.

Microsoft acts as our sub-processor for this service. Processing is configured to take place in the EU. Prompts and completions are not used to train Microsoft or OpenAI models. Microsoft may store prompts and completions for abuse monitoring and human review. For services deployed in the European Economic Area, this data is stored within the same geography and any human review is carried out by authorised Microsoft personnel located in the European Economic Area. Use of the service remains limited to the purposes agreed with each controller, and direct identifiers are replaced with tokens wherever possible before content is submitted.

Changes to this list

We will give customers at least 30 days' notice before engaging a new sub-processor. Notice is sent by email to the contact registered on the account. If you object to a new sub-processor on reasonable data protection grounds, contact us and we will work with you to find a resolution.

Change log

19 September 2026: Google Workspace added. Microsoft Azure OpenAI Service entry updated.