Sub-processors
Last updated: September 2026
To provide the CuspFlow platform, we rely on a small number of trusted third-party providers (sub-processors). Each processes data only on our instructions, under confidentiality and data-protection obligations, and solely to deliver its part of the service. This page lists our current sub-processors and is part of our Privacy Policy.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Cloud database, authentication and file storage that host the application and Clinic Data. | Account data, all Clinic Data (including patient records and images), and security logs. | European Union (Ireland) |
| Cloudflare | Hosting and content delivery for the CuspFlow website and application. | Technical and usage data such as IP address and request logs. | Global edge network |
| Stripe | Subscription billing and payment processing. | Clinic billing contact details and payment information. Full card numbers are not stored by CuspFlow. | United States and global |
| Resend | Delivery of transactional email such as appointment reminders, receipts and booking confirmations. | Recipient email address and the content of the message being sent. | United States |
| WhatsApp Business Platform (Meta) | Delivery of patient reminders and messages a clinic chooses to send over WhatsApp. | Recipient phone number and the content of the message being sent. | Global |
We may update this list as our providers change. When we add a sub-processor that handles personal information, we will update this page and, where appropriate, notify clinics through the platform.
Questions? Contact us at privacy@cuspflow.co.