Version 2026.2 · in effect from September 9, 2026
Draft document: the company details are not filled in yet. Do not treat it as in force.
To provide Dent Lab Pro we use providers that process personal data on our instructions. The list below forms part of Annex B of the Data Processing Agreement.
It has its own page precisely because it changes differently from the contract: adding a provider requires prior notice, not re-signing the agreement.
| Provider | What it processes | Role | Location |
|---|---|---|---|
| Cloudflare R2 | Uploaded files: intraoral photographs, 3D scans, PDF documents, file names | Object storage | EU / global |
| Google Cloud | Email address, name, profile picture | Authentication | EU / US |
| Google Firebase | Device token and notification text, which may contain the case number and names | Push notifications | EU / US |
| Resend | Recipient email address, subject and message body | Transactional email | EU / US |
| Railway | All data processed by the server, plus technical logs | Backend hosting | EU / US |
| Vercel | Requests to the web application, aggregate performance measurements | Frontend hosting | EU / US |
| Database provider | All Platform data | Database | EU |
| Google Analytics | Navigation statistics — only with the visitor's consent | Audience measurement | EU / US |
Google Analytics does not load until the visitor accepts it in the cookie banner. Without consent, nothing is sent to it.
Where processing takes place outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses or another valid mechanism.
We notify laboratories at least 30 days before adding a subprocessor or replacing an existing one. During that period you may object in writing, with reasons. If the objection cannot be resolved, the contract may be terminated without penalty.
We impose on each subprocessor data protection obligations at least equivalent to our own, and we remain liable for its performance.
So that it is clear what does not leave the platform: we use no card payment processor, no SMS provider, no behavioural tracking or advertising service, and no product analytics tool other than the one listed above.
If any of this changes, the list is updated under the procedure in section 3.
Questions about providers: [EMAIL PROTECȚIA DATELOR].