WapadeskWapadesk sub-processors
Status: current list, 12 October 2026. Changes are notified to clinic account owners by email at least 30 days in advance under section 8 of the Data Processing Agreement.
| Sub-processor | Purpose | Location of processing | Safeguard |
|---|---|---|---|
| Google Cloud / Firebase (Google Ireland Ltd) | hosting, database, file storage, serverless functions, staff authentication | London, UK (lead data); United States (staff authentication only) | Google Cloud Data Processing Addendum, UK International Data Transfer Addendum |
| Cloudflare, Inc. | DNS, CDN, web application firewall, rate limiting, static hosting; traffic passes through, nothing is stored | global network; UK and EU data centres serve UK visitors | Cloudflare Data Processing Addendum, UK Addendum |
| Brevo (Sendinblue SAS) | transactional email to clinic staff (no health data) | European Union | EU adequacy regulations; Brevo Data Processing Agreement |
| Stripe Payments Europe Ltd | clinic subscription payments; no patient data | Ireland / United Kingdom | Stripe Data Processing Agreement |
Questions: hello@wapadesk.com.