Broby engages the following Sub-processors to process Customer Personal Data on the terms of this DPA. The current version of this list is also available on request from the DPO contact in Section 15.
| Sub-processor | Role | Region |
|---|---|---|
| Anthropic, PBC | Claude models: radiology, differential diagnosis, transcript correction, agent reasoning | United States |
| OpenAI, L.L.C. | GPT models: summarisation, extraction, classification, radiology fallback | United States |
| RunPod, Inc. | Hosts Broby's self-hosted MERaLiON speech model (primary for SG/Malay/Chinese/Tamil/Singlish); receives consultation audio | Global GPU pool (not region-pinned) |
| Deepgram, Inc. | Speech recognition: English primary + cold-start/fallback all languages; receives consultation audio. Broby opts out of model training (see Privacy Policy §6) | United States / EU |
| Cloudflare, Inc. | R2 object storage: audio recordings, transcripts, uploaded images | Asia-Pacific (APAC) |
| Functional Software, Inc. (Sentry) | Application error monitoring (PII scrubbed server-side before send) | United States |
| Railway Corp. | Application hosting, managed PostgreSQL, and managed Redis | Singapore |
| Stripe (Stripe Payments Singapore Pte. Ltd. + Stripe, Inc.) | Subscription billing and payment processing | Singapore + United States |
Broby uses the MERaLiON speech model developed by ASTAR (Singapore), self-hosted on Broby's own infrastructure. ASTAR does not receive consultation audio through the Service.
Each Sub-processor is bound by a written data-processing agreement (or equivalent contractual obligations auto-incorporated through the Sub-processor's standard service terms) requiring it to process Customer Personal Data only on Broby's instructions and to apply security measures of a comparable standard to those set out in Annex B.