Sub-processors

• Managed infrastructure providers — application database, authentication and storage. Contact marcus@dentorb.ai for the full legal identities, processing locations and applicable safeguards before submitting patient data.
• Cloud hosting provider — application compute and CDN. Region: UK / EU.

• Resend — transactional and marketing email delivery.
• Voice / telephony provider (TBC at GA) — AI Receptionist call handling. UK numbers, EU residency.
• WhatsApp Business API provider (TBC at GA) — outbound and inbound patient messaging.
• SMS gateway (TBC at GA) — SMS reminders and confirmations.

Dentorb AI is being built around our custom-built, multimodal AI gateway. The providers below are planned for text, image and audio workflows; the providers used for each released feature will be confirmed before it processes customer data. No customer patient data is used to train foundation models. Providers are configured to disable training on inputs where the option exists.

• OpenAI — language and reasoning models, with training-on-input disabled.
• Anthropic (Claude) — language and reasoning models, with training-on-input disabled.
• Google (Gemini) — language and multimodal models, with training-on-input disabled.

• Error and performance monitoring provider (TBC at GA).
• Vulnerability management and dependency scanning.

• Billing provider (TBC at GA) — subscription and invoicing.
• Customer support tooling (TBC at GA) — ticketing and in-product chat.

Customers may object to a new sub-processor on reasonable data-protection grounds within 30 days of notice. We will work in good faith to find a solution; if none is found, the customer may terminate the affected service for cause.