Sub-processors
In force since .
These are the companies that handle personal data for Care MCP, Portfoliobox Stockholm AB, org. no. 556894-4382, VAT no. SE556894438201, Rånövägen 30, 168 39 Bromma, Sweden, caremcp@portfoliobox.net. The list is the one our privacy policy and our data processing agreement refer to. When it changes, the date above changes, and organisations are told by email at least 30 days before a new sub-processor starts.
| Sub-processor | What it does | Data it handles | Where |
|---|---|---|---|
| Fly.io, Inc. | Hosting of the service and its database | Everything the service stores, briefs and documents sealed | Amsterdam, the Netherlands. A US company: Standard Contractual Clauses |
| Mollie B.V. | Payments | The amount, the payer's country and what the card or bank provides. Never a brief or a document | The Netherlands |
| Plus Five Five, Inc. (Resend) | Sending email | The recipient's email and the message: receipts, notices that a document is ready, messages to us. Never a brief or a document | United States: Standard Contractual Clauses |
| Apple Inc. and Google LLC | Sign in with Apple and Google, each as its own controller | A stable account identifier and, when shared, an email | Their own terms and safeguards |
In addition, the certified personal trainers and nutrition coaches who write the documents read briefs, without the client's identity, each bound by a written agreement with us. Cloudflare answers DNS for our domains and handles no personal data.