Initializing Vogelview...
Performing medical cross-referencing...
Initializing Vogelview...
Performing medical cross-referencing...
Loading...
Last updated: 2026-05-28 · Published per GDPR Art. 28 · For questions email dpo@vogelview.health
Vogelview engages the following third-party service providers (“sub-processors”) to deliver our service. Each is contracted under a Data Processing Agreement that includes the EU Standard Contractual Clauses where applicable. We notify customers of material changes to this list at least 30 days before introducing a new sub-processor.
| Provider | Service | Region | Transfer mechanism |
|---|---|---|---|
| Google Cloud / Firebase | Authentication, Firestore database, Cloud Storage, Cloud Functions, Analytics | US (primary) with EU multi-region available | SCCs (Standard Contractual Clauses) |
| Vercel | Web hosting, edge network, serverless functions | US (primary) with EU edge nodes | SCCs |
| Provider | Service | Region | Transfer mechanism |
|---|---|---|---|
| Stripe | Payment processing, subscriptions, customer portal | US, EU, UK regional processors | SCCs |
| Provider | Service | Region | Transfer mechanism |
|---|---|---|---|
| Zoho Corporation | Transactional email (SMTP) — welcome, password reset, report-ready notifications | US/EU/IN based on workspace region | SCCs |
| Provider | Service | Region | Transfer mechanism |
|---|---|---|---|
| OpenRouter (and downstream LLM providers) | AI-assisted personalization of finding explanations | US | SCCs — zero-retention mode enabled; raw prompts not retained |
| Hugging Face | Semantic embedding for variant-name matching | US/EU | SCCs |
Per GDPR Art. 28(2), we notify subscribers at least 30 days before adding a new sub-processor.
Or email dpo@vogelview.health to be added manually.
DPO: dpo@vogelview.health
EU representative (under GDPR Art. 27): Listed in our public DPA document at /legal/dpa.