Home / Legal / Sub-processors
Legal

Sub-processors

Who handles data for us, what they do with it and where they hold it. Your workspace’s data is stored in Australia; the exceptions are listed here.

The service

Companies that handle workspace or account data so we can run the HealthOS SaaS products.

ProcessorWhat forWhere data is held
Microsoft AzureHosting the service: the application, its database, file storage, cache, key vault and backupsAustralia (Australia East)
Microsoft Azure AI FoundryCode Captain only: the AI model that reads the redacted document text it codesAzure regions inside or outside Australia, including the United States
StripeSubscriptions, card payments and tax invoicesUnited States and other countries
PostmarkSending the service’s emails: sign-up links, invitations and sign-in codesUnited States
Microsoft 365Sending the service’s emails from HealthOS mailboxesMicrosoft’s data centres for HealthOS’s Microsoft 365 tenancy

Services Australia and the Department of Health, Disability and Ageing are not our sub-processors. The service connects to ACWS, PRODA, GPMS and My Aged Care for a subscriber, with its own credentials, and those agencies hold that information under their own arrangements with the subscriber.

This website

ProcessorWhat forWhere data is held
Google AnalyticsMeasuring how the website is used, only if you accept analytics cookiesUnited States and other countries
YouTube (Google)Playing videos, only when you press playUnited States and other countries
Google FontsServing the website’s fonts, which means Google sees your browser’s IP addressUnited States and other countries
FormspreeReceiving the developer guide request formUnited States
Microsoft Azure and Amazon Web ServicesHosting this website’s pagesMicrosoft’s global network; Amazon Lightsail in Sydney

Changes

We update this list before a new sub-processor starts handling workspace data. Workspace managers who want to be told of a change can ask at privacy@healthos.net.au.