List of Sub-processors
Autoscriber uses carefully selected sub-processors to support the delivery, security, reliability, and continuous improvement of its AI medical scribe services. A sub-processor is a third party engaged by Autoscriber to process personal data on behalf of our customers, in accordance with our Data Processing Addendum (DPA) and applicable data protection laws, including the GDPR.
Autoscriber remains fully responsible for the processing of personal data by its sub-processors and ensures that all sub-processors are subject to appropriate contractual, technical, and organisational safeguards.
General safeguards
Across all sub-processors, the following safeguards apply:
- Audio files are not stored anywhere and are automatically deleted after being processing.
- Personal data is processed and stored exclusively within data centres located in the European Economic Area (EEA), in accordance with configured data residency settings.
- Advanced encryption and anonymisation or pseudonymisation measures are applied to sensitive data.
- Personal data is retained only for as long as needed to provide the service, or is securely deleted in accordance with Autoscriber’s data retention policies.
In addition, all sub-processors:
- Are engaged under a written data processing agreement;
- Are assessed for information security and data protection risks;
- Comply with the GDPR and other Applicable Legislation concerning the processing of personal data;
- Are bound by confidentiality and data protection obligations.
Current Sub-processors
The current list of Autoscriber's sub-processors is as follows:
Microsoft Azure
Legal entity: Microsoft Corporation
Entity location: USA
Services Agreement: The Microsoft Customer Agreement can be found online using the parameters:
- Geography: Netherlands
- Purchase Channel: Enterprise Customer
Data residency location: Personal Data is stored and processed within the European Economic Area using MS Azure's data residency configuration settings.
Purpose of processing:
- Cloud infrastructure and hosting ;
- Secure storage and transferring of data;
- Deployment and operation of models.
Google Cloud Platform (GCP)
Legal entity: Google LLC
Entity location: USA
Services Agreement: The Google Cloud Terms of Service and Workspace Terms of Service can be found online.
Data residency location: Personal Data is stored and processed within the European Economic Area via Google's data residency configuration settings.
Purpose of processing:
- Cloud service provider;
- External communication with users and customers;
- Deployment and operation of models.
Speechmatics
Legal entity: Cantab Research Limited
Entity location: England and Wales
Privacy Policy: The Speechmatics Privacy Policy applies and can be found online (see sections 6 and 7 for data information).
Data residency location: Personal Data is stored and processed in Europe via Speechmatics' European Production Authentication Endpoints.
Purpose of processing:
- Speech-to-text processing as part of Autoscriber’s transcription functionality.
Changes to sub-processors
Autoscriber may update this list from time to time as our services evolve. Any changes to our sub-processors will be made in accordance with the terms of our Data Processing Addendum.