The third parties we rely on to run Sessionkeep, what each one does, and where it processes data.
Last updated August 4, 2026
When you use Sessionkeep to hold clinical records, you are the data controller and we act as your processor. To provide the service we in turn rely on the sub-processors listed below. Each one is bound by a written contract that imposes the same data protection obligations we owe you.
The database that holds your clinical records sits in the European Union and never leaves it. Where a sub-processor operates outside the EEA, the transfer is covered by the European Commission's Standard Contractual Clauses.
| Provider | Purpose | Processing location | Transfer basis |
|---|---|---|---|
| Supabase | Database, authentication, file storage | European Union (Frankfurt, Germany) | No transfer outside the EEA |
| Vercel | Application hosting and content delivery | European Union and United States | Standard Contractual Clauses |
| OpenAI | AI drafting, extraction, transcription and embeddings | United States | Standard Contractual Clauses, zero data retention where available, no training on submitted data |
| Resend | Transactional email (agenda, reminders, portal, sign-in) | European Union (Ireland) | No transfer outside the EEA |
| Stripe | Subscription payments and billing | European Union and United States | Standard Contractual Clauses |
| Daily.co | Video sessions (telehealth). Media is relayed, never recorded | United States and global relay network | Standard Contractual Clauses |
| Sentry | Error monitoring. Client data is stripped before events are sent | European Union (Germany) | No transfer outside the EEA |
| Cloudflare | DNS and domain registration | Global network | Standard Contractual Clauses |
We will update this page before a new sub-processor starts processing personal data on your behalf, and we will notify account holders by email. If you object to a new sub-processor on reasonable data protection grounds, you may terminate your subscription and export your data before the change takes effect.
WORKSJO LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Companies House 15824979. privacy@sessionkeep.app
The other documents in this set: