iCareHealth uses certain subprocessors to assist it in providing Services as described in iCareHealth’s Terms and Condition of Business. Defined terms used herein shall have the same meaning as defined in iCareHealth’s Terms and Condition of Business.


What is a Subprocessor:

A subprocessor is a third party data processor engaged by iCareHealth, who has or potentially will have access to or process Service Data (which may contain Personal Data). iCareHealth engages different types of subprocessors to perform various functions as outlined below. iCareHealth refers to third parties that do not have access to or process Service Data but who are otherwise used to provide the Services as “subcontractors” and not subprocessors.


Due Diligence:

iCareHealth undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed subprocessors that will or may have access to or process Service Data.


Process to Engage New Subprocessors:


iCareHealth will provide notice via this policy of updates to the list of subprocessors that are utilised or which iCareHealth proposes to utilise to deliver its Services. iCareHealth undertakes to keep this list updated regularly to enable those accessing this information to stay informed of the scope of subprocessing associated with the iCareHealth Services.

The following is an up-to-date list (as of the date of this policy) of the names and locations of iCareHealth’s subprocessors and subcontractors.


Infrastructure Subprocessors – Service Data Storage

iCareHealth owns or controls access to the infrastructure that iCareHealth uses to host Service Data submitted to the Services, other than as set forth below. Currently, the iCareHealth production systems for the Services are located within the EEA.

Client accounts are established in one of our services based on the platform that the client is licenced or subscribed to; the client’s Service Data subsequently remains in that service unless agreed between client and iCareHealth, but may be shifted among data centers to ensure performance and availability of the Services. The following table describes the countries and legal entities engaged in the storage of Service Data by iCareHealth.

Entity Type:

Cloud Service Provider

Entity Country:

Ireland

Entity Type:

Cloud Service Provider

Entity Country:

United Kingdom

Entity Type:

Cloud Service Provider

Entity Country:

United Kingdom


Service Specific Subprocessors

iCareHealth works with certain third parties to provide specific functionality within its Services. These providers are the Subprocessors set forth below. In order to provide the relevant functionality these Subprocessors access Service Data. Their use is limited to the indicated Services.

Purpose:

MailGun’s mailing platform is used to send automated emails from iCareHealth’s Medication Management platform. The only information MailGun has access to for this purpose is end-user contact details.

Applicable Platforms:

Medication Management

Entity Country:

USA

Purpose:

MMT support iCareHealth with both functional and technical troubleshooting in a tier 3 capacity. They may be required to view resident and end-user data in order to troubleshoot and resolve.

Applicable Platforms:

Medication Management

Entity Country:

USA

Purpose:

I2D2 support iCareHealth with both functional and technical troubleshooting in a tier 3 capacity. They may be required to view resident and end-user data in order to troubleshoot and resolve.

Applicable Platforms:

Learning Management

Entity Country:

United Kingdom

Purpose:

Zenitech support iCareHealth with both functional and technical troubleshooting in a tier 3 capacity. They may be required to view resident and end-user data in order to troubleshoot and resolve.

Applicable Platforms:

Mobile Point of Care

Entity Country:

Romania


iCareHealth Group Subprocessors

The following entities are members of the iCareHealth Group. Accordingly, they function as subprocessors to provide the Services.