Legal
Sub-processors
These are the categories of sub-processor ChartChronicle Health Technologies Limited may engage to deliver the service. The exact set for your deployment depends on its configuration and region, and the definitive, customer-specific list is provided and kept current in your Data Processing Agreement. Each sub-processor is bound by data-protection obligations no less protective than those we accept.
Current sub-processor categories
| Purpose | Provider(s) | Region |
|---|---|---|
| Cloud hosting, compute & managed PostgreSQL | Hetzner Online GmbH | Germany (EU) |
| Encrypted file & attachment storage | Cloudflare R2 (Cloudflare, Inc.) | United States |
| Subscription payment processing (platform fees only — never patient money) | Paystack | Nigeria |
| SMS / OTP delivery (carries patient phone numbers) | Twilio, Inc. | United States |
| Transactional email | mail-au.smtp2go.com | Per provider |
| NIN/BVN identity verification (opt-in add-on) | Dojah (a licensed NIMC/NIBSS verification partner) | Nigeria |
Changes & objections
We give notice of intended changes to sub-processors so that a controller may object on reasonable data-protection grounds, as set out in the DPA. Payment-card details are handled directly by the payment processors and are not stored by us.
Contact
For the customer-specific sub-processor list or any question, contact hello@chartchronicle.com.