Under our Data Processing Agreement we remain responsible for the performance of every sub-processor we engage. This register is the authoritative list: it is published here so that every customer can see who processes what, and where.
We update this register before a new sub-processor starts processing customer data, and we publish the date of every change.
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
|
Stripe
website |
Card payment processing for subscription invoices.
Only when a facility pays a subscription invoice online by card. |
Billing contact name and email, invoice amounts, payment status and card metadata returned by the gateway. Card numbers are entered on Stripe’s hosted checkout page and never reach Healix. | United States |
|
PayPal
website |
PayPal payment processing for subscription invoices.
Only when a facility chooses PayPal at checkout. |
Billing contact name and email, invoice amounts and payment status. Credentials are entered on PayPal’s own pages. | United States |
|
Africa’s Talking
website |
SMS delivery for appointment reminders, notifications and one-time codes.
Only when the facility configures Africa’s Talking as its SMS provider. |
Recipient name, mobile number and the content of the message. | Kenya |
|
Twilio
website |
SMS delivery for appointment reminders, notifications and one-time codes.
Only when the facility configures Twilio as its SMS provider. |
Recipient name, mobile number and the content of the message. | United States |
|
OpenAI
website |
Processing for the AI-assisted features: clinical drafting, diagnosis and coding suggestions, and natural-language report queries.
Only when OpenAI is the configured AI provider. |
The text submitted to the AI feature plus the clinical context that feature includes, for example recorded vitals, allergies and active problems. Features are off unless the facility enables them. | United States |
|
Anthropic
website |
Processing for the AI-assisted features: clinical drafting, diagnosis and coding suggestions, and natural-language report queries.
Only when Anthropic is the configured AI provider. |
The text submitted to the AI feature plus the clinical context that feature includes, for example recorded vitals, allergies and active problems. Features are off unless the facility enables them. | United States |
|
Google (Gemini API)
website |
Processing for the AI-assisted features: clinical drafting, diagnosis and coding suggestions, and natural-language report queries.
Only when Gemini is the configured AI provider. |
The text submitted to the AI feature plus the clinical context that feature includes, for example recorded vitals, allergies and active problems. Features are off unless the facility enables them. | United States |
|
Requesty
website |
Routing of the requests above to the model provider that is configured, with failover between providers.
Only when Requesty is the configured AI provider or router. |
The same request content as the AI feature that made the call. | Not published |
Changes to this register
We give customers notice before a new sub-processor starts processing personal data for them, and we publish the date of every change on this page. A customer may object to a change on reasonable data-protection grounds; if we cannot resolve the objection, the customer may terminate the affected part of the service without penalty.
Providers a facility contracts directly
A facility that chooses to connect a provider under its own account and agreement — for example by entering its own key for an artificial-intelligence provider — contracts with that provider directly, and the provider is not our sub-processor for that facility. The AI providers in the table above are the ones the product can be configured to use. A facility that does not enable an AI feature sends no data to any of them.
Questions about this register, or a request for a signed copy of the data-protection terms of a provider, can be sent to support@healix.co.ke.
Questions about this document? Write to support@healix.co.ke and our team will answer in writing.