Sub-processors
The companies that handle your practice's data for us, what each one does and where. Last updated 30 October 2026.
Always used
| Company | What it does | Data it handles | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, the database and its backups, uploaded files and logs | All practice data | London |
| Amazon Web Services (Amazon SES) | Sending the emails your practice sends | Email address, name and the message | London |
| Cloudflare | Encrypted connections and protection from attacks, between your browser and Journify | Passes through encrypted and isn't stored | Its nearest location, normally in the UK for UK visitors |
| FireText | Sending text messages and receiving replies | Mobile number, the message and any reply | UK |
| Microsoft (Microsoft 365) | Our team's email and documents | Only what you send us when you ask for support | UK |
Only when you switch it on
| Company | What it does | Data it handles | Where | When |
|---|---|---|---|---|
| Amazon Web Services (Amazon Transcribe) | Speech to text for the AI scribe | Session audio and the transcript | London | If you turn on the AI scribe. Audio is deleted once the draft is ready, and always within 72 hours. |
| Amazon Web Services (Amazon Bedrock) | Drafting notes, letters and summaries with Claude models | The transcript, the draft and the parts of the record the draft needs | London | If you turn on AI features. Nothing is used to train models. |
| Twilio | Another way to send text messages | Mobile number and the message | Outside the UK (US and EU) | Only if your practice chooses it, after a warning on screen. |
Kept in reserve
Postmark is a backup for sending email, run in the EU. It isn't in use. We'd only switch it on if Amazon SES failed during an incident, and we'd tell you when we did. Using it for longer would need the 30 days' notice below.
When this list changes
Before we add or replace a sub-processor, we'll give you 30 days' notice by email to your account owner and update this page. If you object on data protection grounds and we can't sort it out together, you can stop using the affected service without a penalty.
We'll add our data protection officer service and our penetration testing firm here once they're appointed.
Not on this list
Services you connect to your own account, like Stripe for card payments, Xero or QuickBooks, your calendar and your video calls, are your suppliers, not ours. Journify only sends them data once you connect them, and each one shows what it receives before you do.
We use Stripe for our own billing too. That holds your practice's billing contact and payment card, never client records.
Questions
Email security@journify.co.uk and we'll answer in writing.