Sub-processor disclosure
Sub-processors
The following sub-processors and XUND affiliates have the authorization to process customer personal data as part of providing XUND’s services:
| Name | Purpose | Processing location | Relevant for |
| T-Systems Sovereign Cloud powered by Google Cloud | Cloud hosting | Germany |
Health Check Symptom Check & Illness Check Patient Hub |
| MongoDb Ltd. | Cloud hosting | Germany |
Health Check Symptom Check & Illness Check Patient Hub |
| Akenes SA (Exoscale) | Backup hosting | Austria |
Health Check Symptom Check & Illness Check Patient Hub |
| Google Cloud | Disaster recovery cloud hosting | Switzerland |
Health Check Symptom Check & Illness Check Patient Hub |
| Datadog Inc. | Logging and monitoring | Germany |
Health Check Symptom Check & Illness Check Patient Hub |
| DOCTORBOX GmbH | Partner integration for lab diagnostics | Germany | Patient Hub |
| Shopify Inc. | E-commerce backend | Canada | Patient Hub |
| Twilio Inc. | Communication services (SMS for OTPs) | Ireland | Patient Hub |
| Smart Matters Kft XUND affiliate |
Developing and operating XUND services | Hungary |
Health Check Symptom Check & Illness Check Patient Hub |
Selection process
As part of providing the service, XUND is using the services of vendors and service providers (collectively sub-processors) with whom it might share personal data as part of the services. All sub-processors undergo a defined vendor evaluation process, are continuously monitored after introduction, and have a signed Data Processing Agreement. Sub-processors are selected based on the privacy regulations applicable at the headquarters of the company, hosting locations leveraged, and additional technical and organizational privacy controls provided. For further information, please read our Technical and Organizational Measures document.