WWhyCareCarePlan Writer
Legal indexTermsDPAPrivacySecurityAcceptable UseSub-processors
Pre-launch legal draft — professional review is required before live customer contracting.

Sub-processor Schedule

This schedule identifies the principal service providers currently intended to process Customer content for WhyCare CarePlan Writer. WhyCare may update it in accordance with the Data Processing Agreement.

Heart Internet Limited

• Purpose: web hosting, database/infrastructure and server email used to operate the WhyCare service.
• Location: United Kingdom, subject to Heart Internet's own sub-processor arrangements and DPA.
• Provider DPA: https://www.heartinternet.uk/terms/data-processing-addendum

OpenAI

• Purpose: AI processing of anonymised/minimised care information and generation of draft care-plan text through the API.
• Processing locations: may include the UK, EEA and other countries through OpenAI and its listed infrastructure sub-processors.
• OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in to data sharing.
• Provider DPA and current sub-processor list: https://openai.com/policies/data-processing-addendum/ and https://openai.com/policies/sub-processor-list/

WhyCare should update this schedule before enabling any additional provider that materially processes Customer content, such as a different AI provider or external support/analytics service. Payment providers handling billing data but not resident content may be documented separately in the Privacy Notice when enabled.