Service providers

1. Provider register

Supabase (Germany, Frankfurt): authentication, account/profile database, document storage and derived records. Google Gemini (United States): AI chat processing and generation of document embeddings. n8n, self-hosted on a server located in Germany/the EU: document processing and chat orchestration, including account IDs, file paths and message content. Website hosting: Vercel. Domain registration: Hostinger. Email forwarding: ImprovMX.

2. About the n8n server

Our document and chat processing currently runs on a self-hosted n8n instance located on a server belonging to a third party. We are working to formalize this arrangement with a written data processing agreement and appropriate security safeguards, consistent with our obligations for the health-related data that passes through it. Contact info@eliamed.de for current details on this arrangement.

3. International transfers

Google Gemini is based in the United States. Document content is transferred outside the EU/EEA when processed for AI chat and embeddings. We rely on Google's Standard Contractual Clauses for this transfer. Supabase, our n8n hosting, Vercel's EU-region hosting where configured, and Hostinger/ImprovMX are otherwise within the EU or provide EU-based service for this deployment; where any provider processes data outside the EEA, we will identify the transfer mechanism used.