Subprocessors and hosting
Updated 2026-10-18
These are the providers that process personal information on Synchro's behalf, what they do, the information they receive and the country where they process it. The Privacy Policy explains why we process this information, and the Data Processing Agreement governs what we do with Client Data.
Before entrusting information to each of these providers, we assessed the privacy factors and entered into a written agreement that requires it to protect the information and use it only for the service it provides us.
Application (Client Data)
| Provider | Role | Information | Country |
|---|---|---|---|
| Railway Corporation | Hosting the application and its database | All Client Data and accounts | United States |
| Kinde | Authentication, invitation and sign-in emails | Name, email, sign-in log | Canada (Quebec) |
| xAI (X.AI LLC) | Interpreting plain-language constraints and the SynchroIA assistant | Text the User wrote, names of professionals, shifts and activity types, schedule information needed for the answer | United States |
| Groq Inc. | Transcribing questions dictated to the assistant | Audio recording of the question | United States |
| PostHog Inc. | In-app session recording | Interactions and on-screen text (input fields masked) | United States |
| Functional Software Inc. (Sentry) | Error detection | Technical data about the error, without IP address or User identifier | United States |
| Google LLC (Google Fonts) | Application typefaces | IP address and browser when loading | United States |
| Unsplash | Survey illustration images | IP address and browser when an image loads | United States |
Website
| Provider | Role | Information | Country |
|---|---|---|---|
| Cloudflare Inc. | Site delivery, domain name, attack protection, cookie consent log | IP address of every request, consent log | United States |
| PostHog Inc. | Audience measurement and session recording, if you consent | Pages viewed, device, browser, approximate IP address, interactions | United States |
| Google LLC | Google Analytics 4 (if you consent), Google Calendar demo booking (if you consent), YouTube videos (on click) | Pages viewed, IP address, cookies, information entered to book a demo | United States |
Running the company
| Provider | Role | Information | Country |
|---|---|---|---|
| Google LLC (Google Workspace) | Email (hello@, support@, privacy@, etc.) | Correspondence with Clinics, Users and prospects | United States and other countries where Google runs data centres |
| Wise Payments Canada Inc. | Invoicing and receiving transfers | Clinic name, billing contact, invoices, payments | Canada |
Changes to this list
We notify each Clinic's administrator by email at least 30 days before adding or replacing a provider that processes Client Data. A Clinic that objects on reasonable data protection grounds may terminate before the provider starts, and prepaid fees for the unused period are refunded (section 6 of the Data Processing Agreement).
Hosting in a Canadian region can be discussed with organizations whose framework requires it. Questions: [email protected].