Subprocessors
The companies that process personal data on our behalf to provide TapSOS, what they do, and where.
Inclutech Limited is the controller of personal data processed through TapSOS. We use the subprocessors below to help us run the TapSOS app, the TapSOS platform and portal, and this website. Each one acts only on our instructions, under a written contract that requires it to protect your data.
| Subprocessor | What it does for TapSOS | Personal data | Where data is processed | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, databases, sign-in (Amazon Cognito), file storage and service emails (Amazon SES) for the app, portal and this website. | Account and profile information, alert history, sign-in details, files you upload, technical logs. | United Kingdom (London) | Not applicable: data stays in the UK. |
| Datadog, Inc. | App performance monitoring, error and crash reports, and session replay. In recordings, text you type is masked, and screens showing medical details, emergency contacts and addresses are hidden or masked. | User ID, device and app information, IP address, app usage, masked session recordings. | United Kingdom (London, Datadog UK1) | Not applicable: data stays in the UK. |
| LaunchDarkly, Inc. | Feature flags: switching app features on or off for groups of users. | User ID, city and country, app version, a device identifier before you sign in. | United States | UK Extension to the EU-US Data Privacy Framework. |
| OneSignal, Inc. | Push notifications and service messages from the app and the TapSOS platform. | User ID, language, notification token, device information. | European Union (Netherlands). OneSignal is a United States company and its staff there may access data for support. | EU adequacy regulations (UK GDPR). UK Extension to the EU-US Data Privacy Framework for access from the United States. |
| Mapbox, Inc. | Maps, address search, finding the address for your location, and directions. | Location coordinates, addresses you search for, IP address, device information. | United States | UK Extension to the EU-US Data Privacy Framework. |
Who else receives information, and why they are not on this list
Some organisations receive information from TapSOS but are not our subprocessors, because they decide for themselves how to use it, under their own legal duties.
- BT registers your mobile number with the emergencySMS service, and its 999 handlers receive your alerts and pass them to the emergency services.
- The 999 emergency services receive your alert, profile and medical information so that they can respond.
- Apple, Google and Facebook process your information if you choose to sign in with one of their accounts, under their own privacy policies.
- Apple and Google run the app stores you download TapSOS from.
Changes to this list
We update this page before a new subprocessor starts to process personal data. If your organisation has a contract with us, we will also tell you about changes in the way your data processing agreement sets out.
To be told about changes, or for a copy of our data processing terms, email mydata@tapsos.com.