Early access. In force from 26 October 2026 for the HealthOS SaaS early-access release. We will review and update these documents as the service matures, and give workspace managers at least 30 days’ notice of any change that is materially worse for them.
The service
Companies that handle workspace or account data so we can run the HealthOS SaaS products.
| Processor | What for | Where data is held |
|---|---|---|
| Microsoft Azure | Hosting the service: the application, its database, file storage, cache, key vault and backups | Australia (Australia East) |
| Microsoft Azure AI Foundry | Code Captain only: the AI model that reads the redacted document text it codes | Azure regions inside or outside Australia, including the United States |
| Stripe | Subscriptions, card payments and tax invoices | United States and other countries |
| Postmark | Sending the service’s emails: sign-up links, invitations and sign-in codes | United States |
| Microsoft 365 | Sending the service’s emails from HealthOS mailboxes | Microsoft’s data centres for HealthOS’s Microsoft 365 tenancy |
Services Australia and the Department of Health, Disability and Ageing are not our sub-processors. The service connects to ACWS, PRODA, GPMS and My Aged Care for a subscriber, with its own credentials, and those agencies hold that information under their own arrangements with the subscriber.
This website
| Processor | What for | Where data is held |
|---|---|---|
| Google Analytics | Measuring how the website is used, only if you accept analytics cookies | United States and other countries |
| YouTube (Google) | Playing videos, only when you press play | United States and other countries |
| Google Fonts | Serving the website’s fonts, which means Google sees your browser’s IP address | United States and other countries |
| Formspree | Receiving the developer guide request form | United States |
| Microsoft Azure and Amazon Web Services | Hosting this website’s pages | Microsoft’s global network; Amazon Lightsail in Sydney |
Changes
We update this list before a new sub-processor starts handling workspace data. Workspace managers who want to be told of a change can ask at privacy@healthos.net.au.