Sub-processors & Data Recipients
Kairo relies on a small number of carefully selected third parties to run its service. The tables below list every sub-processor that processes personal data on our behalf, together with the statutory recipients we are legally required to transmit certain data to. We keep this distinction explicit: sub-processors act on our instructions under a data-processing agreement (GDPR Art. 28), while statutory recipients are independent data controllers that Italian law obliges us to report to.
Last updated: 22 July 2026
A. Sub-processors
These providers process personal data on our behalf, under contract and on our documented instructions (GDPR Art. 28).
| Provider | Purpose | Data categories | Region |
|---|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure and hosting — application server, PostgreSQL database, and object storage for patient and clinic files. | All hosted data: patient records, clinical data, invoices, and documents. | EU (Germany / Finland) |
| Mailgun (Sinch) | Transactional email delivery — appointment reminders, recalls, invitations, and invoice/quote emails. | Recipient email address and email content. | EU (EU mail region) |
| Fatture in Cloud (TeamSystem) | Electronic invoicing — generates e-invoices and transmits them to the Italian Exchange System (SDI). | Invoice and billing data, patient fiscal identifiers (codice fiscale), amounts. | Italy / EU |
| Cloudflare | Turnstile CAPTCHA on the public inquiry form (anti-abuse / bot protection). | Challenge token and visitor IP address of marketing-form submitters. | Global (Cloudflare network) |
| Amazon Web Services (AWS Bedrock) | AI assistant inference — the in-app assistant sends conversation context to the Anthropic Claude model hosted on AWS Bedrock to generate responses. Conversation context now also includes text derived from files a user attaches to the chat (spreadsheet column headers and a small sample of rows, and PDF text), minimised to what the task requires. | Assistant conversation content, the patient data staff reference in it (names, clinical and scheduling details), and text extracted from user-attached files (spreadsheet headers and sample rows, PDF text) which may contain personal data. | EU (Frankfurt, eu-central-1) |
| Meta Platforms Ireland Ltd (WhatsApp Business Platform) | WhatsApp Business messaging — appointment reminders, confirmations, and recalls delivered to patients over WhatsApp. | Patient mobile number and message content. | EU (Ireland) / Global (Meta network) |
B. Statutory recipients
We are legally required to transmit certain data to these public bodies. They are independent data controllers, not our sub-processors.
| Recipient | Purpose | Data categories | Region |
|---|---|---|---|
| Sistema Tessera Sanitaria (Sogei — MEF / Agenzia delle Entrate) | Mandatory transmission of healthcare expense data for the pre-filled tax return (modello 730). | Healthcare expense records and patient codice fiscale. | Italy |
| Sistema di Interscambio (SDI — Agenzia delle Entrate) | Statutory destination of electronic invoices (reached via Fatture in Cloud). | Electronic invoice data. | Italy |
Maintenance note: we keep this list current. It must be updated whenever a sub-processor or data recipient is added, changed, or removed. Where there is any doubt, this page — not an older document — reflects our current sub-processors.