Subprocessor List
Dealsparrow Limited, trading as NeuroClo (“NeuroClo”), uses certain third-party subprocessors to help deliver the NeuroClo Services. This page lists subprocessors that may process Customer Personal Data or Protected Health Information (PHI) in connection with the platform.
This list should be read with our Privacy Policy, Data Processing Agreement, and (where HIPAA applies) Business Associate Agreement.
NeuroClo will provide notice of material additions or replacements of subprocessors as described in the DPA. Customers may object on reasonable data-protection grounds within the timeframe stated in the DPA.
1. Infrastructure and hosting
Amazon Web Services, Inc. (“AWS”)
Purpose:
- Cloud hosting and infrastructure
- Databases and storage
- Authentication and identity services
- Encryption and key management
- Email and communications services
- Telehealth and messaging functionality
- AI-assisted transcription and clinical documentation features
- Logging, monitoring, backup, and security services
Typical location: AWS regions configured for the Services
NeuroClo may use various AWS services to provide the platform. The specific services used may change over time as the Services evolve. Customer Personal Data is processed only for the purposes described in the Privacy Policy, this Subprocessor List, and applicable customer agreements (including any DPA or BAA).
Where PHI is processed using HIPAA-eligible AWS offerings, NeuroClo maintains Business Associate arrangements with AWS as required for those workloads.
2. Other subprocessors (as configured)
| Subprocessor | Purpose | Status |
|---|---|---|
| Payment / billing provider(s) | Customer subscription billing and payment processing | Engaged when Paid Services are enabled; specific provider disclosed in order forms or on update of this list |
| SMS / voice provider(s) | Appointment and service-related messaging where SMS is enabled | Engaged only if/when SMS features are offered to the customer |
| Support tooling provider(s) | Customer support ticketing; access to customer data only as needed to resolve support requests | Engaged as needed for support operations; specific tools disclosed on update of this list |
3. Out of scope (marketing website)
The following process data in connection with NeuroClo’s public marketing website, where NeuroClo typically acts as an independent controller, and are not subprocessors for healthcare platform Customer Personal Data unless they are also used inside the application environment:
- Vercel (marketing site hosting / analytics);
- Google Analytics (marketing site analytics, where enabled and consented).
See the Cookie Policy and Privacy Policy for marketing-site practices.
4. Updates
NeuroClo may update this list as the Services evolve. Material changes to subprocessors that process Customer Personal Data will be notified as described in the DPA. The “Last updated” date at the top of this page reflects the current published version.
5. Contact
- Email: hello@neuroclo.com
- Dealsparrow Limited, 395 Clapham Road, London, SW9 9BT, United Kingdom