Every vendor that touches the platform.
A complete, published list of the sub-processors MediVault engages to deliver the Service, what each one does, where it operates, and — critically — whether it can access patient data. Most cannot.
- Sub-processors
- 7
- With patient access
- 0
- Change notice
- 30 days
- Jurisdictions
- 3
MediVault AG is a fictional company built for a portfolio / demo website. This page is illustrative template content only — it is not real legal advice, it has not been reviewed by counsel, and it creates no actual rights or obligations. Do not rely on it for an actual product, business or legal decision.
Name, purpose,
jurisdiction and access.
Data centre operators hold encrypted shards and nothing else — MediVault holds the only keys, in HSMs the data-centre operator cannot reach. No sub-processor below has standing access to decrypted patient data.
| Sub-processor | Purpose | Location | Data categories | Patient data access |
|---|---|---|---|---|
| Swiss Data Centres AG — Rümlang (ZH-DC-01) | Primary production vault — physical hosting and power/cooling | Rümlang, Kanton Zürich, Switzerland | Encrypted data at rest, encrypted backups | No — encrypted shards only, no key access |
| Swiss Data Centres AG — Glattbrugg (ZH-DC-02) | Synchronous replica — synchronous replication facility | Glattbrugg, Kanton Zürich, Switzerland | Encrypted data at rest, encrypted backups | No — encrypted shards only, no key access |
| Swiss Data Centres AG — Meyrin (GE-DC-03) | Disaster recovery vault — warm standby, 15-minute RPO | Meyrin, Canton de Genève, Switzerland | Encrypted data at rest, encrypted backups | No — encrypted shards only, no key access |
| Helvetia Cloud Compute AG | Compute, network and orchestration layer for the Swiss production environment | Zürich, Switzerland | Encrypted data at rest and in transit, infrastructure telemetry | No — encrypted shards only, no key access |
| Alpen Mail Relay SA | Transactional email delivery — account notifications, invoices, password resets | Lausanne, Switzerland | Name, work email address, notification content (no clinical content) | No |
| Sentry-class error monitoring provider (EU region) | Application error and performance monitoring for the engineering team | European Union (Frankfurt region), Standard Contractual Clauses in place | Stack traces, request metadata, pseudonymised user identifiers — scrubbed of patient content by policy | No — scrubbing pipeline blocks clinical fields before export |
| ST Comp Holdings Sdn. Bhd. | Engineering partner — product engineering, tooling and platform build support | Malaysia | Source code, non-production test fixtures, synthetic data only | No standing access to production or customer data |
ST Comp Holdings Sdn. Bhd., our engineering partner (stcompholdings.com), builds and maintains platform tooling under a signed confidentiality and security agreement. Its engineers work exclusively against synthetic and non-production fixtures and hold no standing credentials to any production or customer environment.
30 days' notice,
a real right to object.
Notice before a change
Before adding a new sub-processor, or replacing an existing one in a way that changes its access to Customer Data, MediVault updates this register and emails every Enterprise and Spital account's registered administrator at least 30 days in advance.
Right to object
A Customer that reasonably objects to a new sub-processor on data-protection grounds may raise the objection in writing within the notice period. If MediVault cannot address the objection — for example by routing that Customer's data around the new vendor — either party may terminate the affected module without further liability, as set out in the data processing agreement.
Emergency replacement
Where a sub-processor must be replaced immediately for security reasons, MediVault will notify Customers as soon as practicable after the change and explain the circumstances, rather than delay remediation to preserve the standard notice period.
Want change notices
sent to your team directly?
Enterprise and Spital customers can add a distribution list to receive sub-processor change notices automatically, in addition to the primary account administrator.
7 sub-processors · 0 with standing patient-data access