Transparency
Sub-processors
higeia uses sub-processors to operate specific parts of the service. Each sub-processor is evaluated for security practices, data location and regulatory compliance before engagement.
Last updated: April 2026
| Sub-processor | Purpose | Location | Contractual basis |
|---|---|---|---|
| AWS | Hosting and database infrastructure | sa-east-1 (São Paulo) | DPA with SCCs |
| Anthropic | LLM provider (Claude, all plans) | USA | DPA with SCCs |
| LLM provider (Gemini, all plans) | USA | DPA with SCCs | |
| Cloudflare | CDN, DNS, DDoS protection and edge computing | Global (edge) | DPA with SCCs |
Notification policy
Active clients will be notified at least 30 days in advance before the addition of new sub-processors. Substantiated objections may be raised during this period, and Sciereli HDC commits to evaluating alternatives when feasible.
Contact
For questions about sub-processors or international data transfers:higeia@saude.dev