Subprocessors

What is a subprocessor?

A subprocessor is an external company that processes personal data on our behalf to operate the OnlineDoc (DocEnLinea) connection platform. Each subprocessor is contractually obligated to protect data in accordance with Mexico's LFPDPPP and equivalent international standards.

We publish this list in compliance with the LFPDPPP transparency principle so you know exactly who participates in the processing of your data.

Infrastructure and hosting

• Cloudflare, Inc. — Hosting (Workers/Pages), CDN, DDoS protection, DNS, KV storage. Location: Global (Anycast network). Country: USA.

Communications

• Resend, Inc. — Transactional email delivery (contact confirmations, notifications). Country: USA.

Video/voice connection (when activated)

• Real-time video/voice provider — Infrastructure for video and voice connection sessions between patients and medical reviewers. Transmits only the session stream; the clinical record is managed by the reviewer. Country: USA / Global.

This subprocessor will be activated when video/voice sessions become available on the platform.

Analytics and monitoring

• Cloudflare Web Analytics — Anonymous site performance and traffic metrics. Does not collect personally identifiable data. Country: USA.

Payments (when activated)

• Stripe, Inc. — Card payment processing. PCI-DSS Level 1 compliant. OnlineDoc does not store card data. Country: USA.

This subprocessor will be activated when payment services become available on the platform.

Partner compounding pharmacies and labs

• Partner compounding pharmacy(ies) and lab(s) — Service coordination where appropriate. They only receive the minimum data necessary (e.g., name, shipping details, or study request) as instructed by the responsible medical reviewer or office. Country: Mexico.

Specific pharmacy and lab details will be communicated to the patient at the time of service.

International transfers

Some subprocessors are headquartered in the United States. Under Article 37 of the LFPDPPP, these transfers are made with your express consent granted by accepting our Privacy Notice, and are subject to contractual commitments of equivalent protection.

Changes to this list

We will update this list when we add or remove subprocessors. Significant changes will be reflected with a new update date. If a new subprocessor materially affects the processing of your data, we will notify you as described in our Privacy Notice.

Contact

For questions about our subprocessors or the processing of your data, write to us at: contact@docenlinea.mx