This is the public, maintained list of processors that handle personal data on behalf of REC SUARL for the DossiMed service. Data categories are indicative; operational detail is described in each vendor’s policy.
Subprocessors — DossiMed
Last updated: 2026-05-15
Éditeur responsable / Data controller
| Publisher | REC SUARL (“totalement exportatrice”) |
| Legal form | SUARL – Société Unipersonnelle à Responsabilité Limitée, Tunisia |
| Registered office | Complexe Emna C 4 4, 2083 Raoued, Ariana, Tunisia |
| Registry | 1808396F |
| Data controller | REC SUARL |
| DPO | dpo@dossimed.ai |
| Hosting | Supabase eu-central-2, Zürich, Switzerland (GDPR adequacy decision under Article 45) |
Supabase Inc.
Location: Switzerland (Europe Central, Zurich)
Role: Backend (authentication, database, Storage, serverless Edge functions, scheduler)
DPA / transfer status: DPA accepted (self-service / terms)
Data categories processed: Account, health data, technical metadata
Google LLC (Firebase Cloud Messaging)
Location: Multi-region (Google Cloud)
Role: Mobile push notifications
DPA / transfer status: DPA / SCC — finalisation by exporter or acquirer
Data categories processed: FCM token, device metadata
Microsoft Corporation (Azure OpenAI + Document Intelligence)
Location: EU (preferred region; configuration being finalized)
Role: Medical document OCR and structured extraction with generative AI
DPA / transfer status: DPA / SCC — finalisation by exporter or acquirer
Data categories processed: Textual document content for extraction (configuration aims to avoid patient identifying data in the pipeline)
Bird.com
Location: Netherlands (EU)
Role: Conversational WhatsApp, automated voice calls, OTP
DPA / transfer status: DPA accepted (self-service / terms)
Data categories processed: E.164 number, message content, call recordings
RevenueCat Inc.
Location: United States
Role: In-app subscription management (Android, iOS)
DPA / transfer status: DPA accepted (self-service / terms)
Data categories processed: Backend user id, subscription status
Vercel Inc.
Location: Multi-region (EU region recommended)
Role: Hosting of the marketing website and physician web viewer
DPA / transfer status: DPA accepted (self-service / terms)
Data categories processed: Technical logs, IP address, session identifiers