Cogent Clinic Ltd Subprocessors

Cogent Clinic operates a digital clinical documentation and session management platform for healthcare clinicians, hosting patient account data and clinical content.

Healthcare / Health Tech cogent.clinic
View source page Companies using Cogent 4
Subprocessors
8
Locations
6
Categories
6
Last scanned

8 subprocessors

Name Category Purpose Location Data processed
Amazon Web Services (AWS) ✓ Cloud Infrastructure Compute, database, object storage, secrets management, scheduled jobs, and backups. Hosts the Cogent Clinic application and all customer account data and audit logs. United Kingdom Stream A (clinician account data, audit logs, subscription metadata). Stream B (de-identified, tokenised clinical content at rest; placeholder mapping and session transcripts stored encrypted at rest under a Cogent-held key in AWS KMS).
Anthropic ✓ AI Provides large-language-model inference used to generate draft clinical documentation, folder-scoped reflective-thinking chat replies, formulation sections, documentation-completeness checks, and text extraction from clinician-uploaded handwritten notes. Accessed through Amazon Bedrock. United Kingdom For drafting, chat, formulation and completeness checks: tokenised clinical content with patient-identifying details replaced by placeholders on the clinician's device before transmission. For handwritten-note extraction: the uploaded image or PDF is sent as-is and may contain identifying information.
AssemblyAI ✓ AI Converts a clinical session's audio to text in real time so the clinician can capture a transcript without leaving the browser. Diarisation (speaker separation) is enabled on every session. European Union Audio stream containing speech from the clinician and (with client consent) the client.
Stripe Payments UK, Ltd ✓ Payment Processing Processes subscription payments, stores payment instruments, generates invoices, manages subscription lifecycle events. United Kingdom European Economic Area primarily limited US transfers for operational support Clinician name, email address, Stripe customer and subscription identifiers, payment card tokens (Stripe-held, Cogent Clinic does not see card data), invoice metadata, VAT information. No clinical content.
Zoho Software Sends account verification, password reset, two-factor codes, billing notifications, and other operational email. European Union Recipient email address, email content relating to account operation. No clinical content in email.
Sentry Error Tracking Records application errors to support debugging and reliability. European Union Error metadata only (stack traces, timestamps, user ID, browser context). Scrubbing rules strip request or response bodies before transmission.
PostHog Analytics Aggregate product-usage metrics to support product decisions. Used on the authenticated application for feature-level usage patterns only; not for marketing analytics. European Union Non-content event metadata (feature use, doc type selected, timestamps, account id). No draft bodies, no chat messages, no transcript content, no patient-identifying content.
Cloudflare Cloud Infrastructure DNS resolution for cogent.clinic and static hosting for the marketing site. Not deployed on the authenticated application domain. Global edge EU-biased routing Public-site request metadata only (IP, User-Agent, request path). No clinical content.

Your data may flow beyond direct subprocessors. Click to expand and see the chain.

Loading data flow...

No changes recorded yet. Changes will appear here after the next scan detects updates.