Sub-Processor List
Last updated: 12 August 2026
EILEEN uses the following third-party service providers ("sub-processors") to deliver our mental health support platform. Each processor operates under a Data Processing Agreement (DPA) and processes data only as instructed by CTRL Ltd.
We may update this list from time to time. Material changes will be communicated via in-app notification and email. You can always find the latest version at this page.
AI Providers
No AI sub-processor is currently active. EILEEN's AI features are disabled and no letter data is sent to any external AI provider. When AI-assisted letter reading is enabled, it runs locally on our own systems with no external egress as the primary path.
The selected fallback, for letters our local systems cannot read, is Microsoft Azure AI Document Intelligence (UK South). It would be used only via our internal inference gateway, with EXIF metadata stripped and personal details redacted before sending; the analyse result is retained for up to 24 hours and is never used for model training. It is not yet active and will not process any letter until a Data Processing Agreement fixing UK-region processing and no-training terms is signed, and this page is updated to list it as active.
What is NOT sent to AI providers: your name, email address, phone number, or care provider name. Provider names mentioned in letters are redacted before processing.
Cloud Infrastructure
| Provider | Purpose | Data Categories | Location |
|---|---|---|---|
| DigitalOcean | Application hosting and database | All application data | United Kingdom (LON1) |
| Amazon Web Services (S3) | File storage and content delivery | Uploaded files, static assets | EU (eu-west-2) |
| Redis Cloud | Caching and task queue | Session tokens, task metadata (no PII) | EU |
Communication
| Provider | Purpose | Data Categories | Retention | Location |
|---|---|---|---|---|
| Twilio | SMS notifications and reminders | Phone numbers, message content | 30 days | US (EU data routing) |
| Firebase Cloud Messaging | Push notifications | Device tokens, notification content | None — delivery only | EU |
Monitoring
| Provider | Purpose | Data Categories | Retention | Location |
|---|---|---|---|---|
| Sentry | Error tracking and crash reporting | Anonymised crash reports, stack traces | 90 days | EU (eu.sentry.io) |
Data Minimisation
For all sub-processors, we follow the principle of data minimisation:
- Only the minimum data necessary for the specific purpose is shared
- EXIF metadata is stripped from images before sending to AI providers
- User names and provider names are redacted where possible
- Anonymised data is used for monitoring and crash reporting
- All sub-processors have Data Processing Agreements in place
Your Rights
You can withdraw consent for AI data processing at any time in your Privacy Settings. When you withdraw consent, all your AI interaction records are immediately deleted. EILEEN will continue to work without AI features — you can still enter appointment details manually.
For questions about our sub-processors, contact us at privacy@eileen.app.