Legal
Sub-processors
The third-party providers we use to run PharmaDiagrams. Each one is bound by a contract that limits it to our instructions. This is the authoritative, public list — not a list available only on request.
Last updated: 28 June 2026
Notice of changes
Before a new sub-processor begins processing customer data, and before we replace an existing one, we give customers at least 30 days' notice. That gives you time to review the change and raise any concern before it takes effect.
To be notified when this list changes, write to us through our contact page and ask to be added to sub-processor change notices, or email contact@pharmadiagrams.com.
| Sub-processor | What they handle | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting for the app, the database, and your drawings | European Union (Ireland, eu-west-1) |
| Cloudflare | File storage for images and exports, and website delivery | European Union (storage region-pinned) |
| Northflank | Deployment and operations platform; no access to your drawings | United Kingdom (control plane only) |
| Resend | Sending email, such as replies and form notifications | United States |
| Plausible | Privacy-friendly website analytics, no cookies | European Union |
| PostHog | Product analytics for the editor (opt-out-able usage telemetry; inputs and drawings masked) | European Union (Germany) |
| Sentry | Error monitoring and performance for the editor (stack traces and request metadata; drawing pixels and text masked) | European Union (Germany) |
| Better Stack | Operational application logs (PII-redacted) for debugging; no access to your drawings | European Union |
The “Location” column states each sub-processor's country or jurisdiction of processing. Each sub-processor's registered legal-entity address is set out in that provider's published Data Processing Addendum. This register is pending final legal review.
We do not currently use a third-party payment provider. If that changes, we will add it to this list and give notice first. A machine-readable version of this list is published at /subprocessors.json.
Questions about this list?
For anything about your data, a data processing agreement, or these sub-processors, talk to us.