---
title: List of Sub-processors
slug: trust-centre/list-of-sub-processors
createdAt: 2025-10-30T07:57:31.461Z
---

Autoscriber uses carefully selected sub-processors to support the delivery, security, reliability, and continuous improvement of its AI medical scribe services. A *sub-processor* is a third party engaged by Autoscriber to process personal data on behalf of our customers, in accordance with our Data Processing Addendum (DPA) and applicable data protection laws, including the GDPR.

Autoscriber remains fully responsible for the processing of personal data by its sub-processors and ensures that all sub-processors are subject to appropriate contractual, technical, and organisational safeguards.

### General safeguards

Across all sub-processors, the following safeguards apply:

- Audio files are not stored anywhere and are automatically deleted after being processing.
- Personal data is processed and stored exclusively within data centres located in the European Economic Area (EEA), in accordance with configured data residency settings.
- Advanced encryption and anonymisation or pseudonymisation measures are applied to sensitive data.
- Personal data is retained only for as long as needed to provide the service, or is securely deleted in accordance with Autoscriber’s data retention policies.

In addition, all sub-processors:

- Are engaged under a written data processing agreement;
- Are assessed for information security and data protection risks;
- Comply with the GDPR and other Applicable Legislation concerning the processing of personal data;
- Are bound by confidentiality and data protection obligations.

## Current Sub-processors

The current list of Autoscriber's sub-processors is as follows:

### Microsoft Azure

**Legal entity:** Microsoft Corporation

**Entity location:** USA

**Services Agreement:** The [Microsoft Customer Agreement](https://www.microsoft.com/licensing/docs/customeragreement) can be found online using the parameters: 

- Geography: Netherlands 
- Purchase Channel: Enterprise Customer

**Data residency location:** Personal Data is stored and processed within the **European Economic Area** using MS Azure's [data residency](https://azure.microsoft.com/en-us/explore/global-infrastructure/data-residency/) configuration settings.

**Purpose of processing:**

- Cloud infrastructure and hosting ;
- Secure storage and transferring of data;
- Deployment and operation of models.

### Google Cloud Platform (GCP)

**Legal entity:** Google LLC

**Entity location:** USA

**Services Agreement:** The [Google Cloud Terms of Service](https://cloud.google.com/terms) and [Workspace Terms of Service](https://workspace.google.com/intl/en_uk/terms/premier_terms/) can be found online.

**Data residency location:** Personal Data is stored and processed within the **European Economic Area** via Google's [data residency](https://support.google.com/a/answer/7630496?hl=en) configuration settings.

**Purpose of processing:**

- Cloud service provider;
- External communication with users and customers;
- Deployment and operation of models.

### Speechmatics

**Legal entity:** Cantab Research Limited

**Entity location:** England and Wales

**Privacy Policy:** The [Speechmatics Privacy Policy](https://www.speechmatics.com/legal/privacy-policy) applies and can be found online (see sections 6 and 7 for data information). 

**Data residency location:** Personal Data is stored and processed in **Europe** via Speechmatics' [European Production Authentication Endpoints](https://docs.speechmatics.com/get-started/authentication#supported-endpoints). 

**Purpose of processing:**

- Speech-to-text processing as part of Autoscriber’s transcription functionality.

## Changes to sub-processors

Autoscriber may update this list from time to time as our services evolve. Any changes to our sub-processors will be made in accordance with the terms of our Data Processing Addendum.