Sub-processors

    Last updated: 14 October 2026 · We publish additions and material changes on this page, with the date of the change at the top.

    Sub-processors that may handle personal data

    Amazon Web Services EMEA SARL

    Privacy / DPA ↗
    Purpose:
    AWS Lightsail (single VM in Frankfurt running the entire Artifakt Vigilance service - Caddy reverse proxy, FastAPI backend, self-hosted PostgreSQL). Amazon Cognito holds the identities of the accounts that existed before accounts closed, until they are deleted.
    Data categories:
    Search activity (query terms, sources, dates; no account), salted IP hashes for rate limits, consent-gated usage analytics, HTTP access logs, and the former account data described in the Privacy Policy until its deletion date.
    Location:
    EU only. The host VM, the PostgreSQL data volume and the Cognito user pool are in eu-central-1 (Frankfurt).
    Transfer safeguard:
    AWS Service Terms with the EU GDPR addendum (Luxembourg-based controller-to-processor SCCs). The database is self-hosted on the same VM and never leaves the EU region.

    No longer used

    Until 14 October 2026, the signed-in features also used the following. Artifakt Vigilance no longer sends them any data.

    • Amazon Bedrock, with Anthropic Claude models (AWS, EU regions) - AI inference for search refinement, literature screening and report drafting.
    • Resend (Plus Five Five, Inc., United States) - Account and alert emails.

    Public-data sources we read from (not sub-processors)

    The following are public regulatory or scientific databases. We send your search query to them in order to fetch results. They are independent controllers, not our sub-processors, and their own privacy notices apply.

    Objecting to a sub-processor

    If you have a legitimate concern about a specific sub-processor, write to hello@artifaktmedical.com. We will respond within 30 days; if we cannot accommodate your objection, you may stop using the service and ask us to erase any data we hold about you.

    See also: Privacy Policy · Terms of Service