Subprocessors
Last updated 16 July 2026 · Version 1.1
Current providers
Marlo Solutions Ltd uses the providers below to operate Clinote. The data involved depends on the feature you use.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| OpenAI | AI transcription and structured extraction | Submitted audio and entry text; AI outputs | United States |
| Render | Application hosting and processing | Account identifiers; entry content and audio during processing; technical logs | Frankfurt, Germany (EU) |
| Supabase | Database, authentication, and account management | Account, authentication, profile, saved entry, transcript, structured field, and Clinote billing-status data | EU (Ireland) |
| Vercel | Web app hosting and delivery | Web request, device, and technical-log data; no clinical content stored at rest on Vercel | Global edge; request logs may transit the United States |
| PostHog | Cookieless product analytics | Pseudonymous account id, page and coarse action events, coarse entry category, device or browser information, and approximate location; no note, transcript, detailed extracted fields, or patient details | Frankfurt, Germany (EU) |
| Stripe | Card payments, subscriptions, receipts, and billing portal | Name, email, Stripe identifiers, card and payment data, invoices, and subscription status; card data is held by Stripe, not Clinote | United States and other Stripe service locations |
| Brevo | Transactional email, including welcome messages, password resets, and receipts | Name and email address | France (EU) |
| Cloudflare | DNS, network security, and threat protection | IP address, DNS, request, and security metadata | Global network |
Changes to providers
We will update this page before adding or replacing any provider that processes user data.
Contact
Questions about this register can be sent to our privacy contact at hello@clinote.co.