Legal
Sub-processor List
- ICO Registration
- Pending. Registration with the Information Commissioner's Office is in progress and will be in place before the first clinic is onboarded. No registration number is stated in this document until it exists.
- Version
- 1.0
- Last updated
- 20 September 2026
Bailey & Prosper Holdings Ltd
Subscribers will be notified of any changes to this list at least 30 days in advance.
| Sub-processor | Legal entity | Purpose | Data processed | Location | DPA reference |
|---|---|---|---|---|---|
| Supabase | Supabase, Inc (Delaware, USA) | Database hosting, file storage, authentication | All patient data, practitioner data, audit logs | eu-west-2 (London, UK) | PandaDoc ref: LGKVL-BKGMM-K8NWG-4MXMH, signed 28 April 2026 |
| Vercel | Vercel, Inc (Delaware, USA) | Application hosting and CDN | HTTP request data in transit, environment variables | Global CDN | Binding on account creation; clarification pending re special category data |
| Resend | Plus Five Five, Inc (California, USA) | Transactional email delivery | Patient name, email address, appointment details, form links | United States | DocuSign ref: CC958417-9D1F-42CD-8B94-53B5F496F14E, signed January 2026 |
| Upstash | Upstash, Inc (Delaware, USA) | Rate limiting (Redis) | IP addresses, request counters | eu-west-2 (London, UK) | Binding on account creation per Upstash Terms of Service |
This list is reviewed and updated as sub-processors are added or changed.
Bailey & Prosper Holdings Ltd. ICO registration pending.