Subprocessors
These service providers process personal data for the hosted Clinwright service. We announce a new one here, and by email to organization owners, at least 30 days before it starts (see the Data Processing Agreement).
| Provider | What it does | Data | Where |
|---|---|---|---|
| Hetzner Online GmbH, with Hetzner US LLC for its US locations | Servers, database and file storage; backups | Everything in the service | United States (Ashburn, Virginia); backups in Germany |
| Resend (Plus Five Five, Inc.) | Sending account emails: confirmations, invitations, password resets, notices | Name, email address, email content | United States |
| GitHub, Inc. | Tracking the feedback sent with Clinwright’s Feedback button (in a private repository) | The feedback’s text, the page it was about, the organization’s short name, the browser’s description (not the email address) | United States |
The public service has no AI of its own and takes no payments. When an organization adds its own Anthropic API key, Clinwright sends the AI the context it needs (specifications, program code, run logs, extracts of outputs and data) under that organization’s own agreement with Anthropic, which is then the organization’s provider rather than ours; without a key nothing is sent. Dedicated servers and self-hosted installations of Clinwright use the AI service their contract or operator chooses.