Sub-processors
Which service providers MediSync uses, which of them process patient data and where to get the binding list.
- Applies to
- Browser, iOS, Android, Windows
- Reviewed
- 24 September 2026
- Version
- Dashboard 2.10
The binding list of sub-processors is an annex to the data processing agreement (DPA, in German AVV). You get it on request from datenschutz@medisync.me. A summary is on the data processing agreement page.
Who processes patient data
For the MediSync Cloud, the hosting provider Amazon Web Services stores and processes the patient data. It provides the data centres in Germany and runs the language model for the documentation drafts within the EU.
Traffic to the application passes encrypted through Cloudflare. Cloudflare delivers the application and blocks attacks.
Who processes other data
MediSync uses further providers for specific tasks:
- sending emails to your account, such as confirmations, passwords and invoices
- processing payments
- support
- sign-in with Google or Microsoft, if you use it
- detecting technical errors
These providers only receive the account or communication data they need for their task. They do not receive patient data. For the same reason, do not send patient data to support.
When the list changes
MediSync informs you in advance before a sub-processor is added or replaced. You can object to the change. Contracts under Art. 28 GDPR are in place with all sub-processors.
For a dedicated instance or an installation in your own data centre, the providers in your individual contract apply.
Did this article help you?