Last updated: 10 October 2026
To run Warden we use a small number of companies that process care home data on our behalf. The law calls them sub-processors. Each one is bound by a written contract with data protection terms that protect the data as well as our Data Processing Agreement does.
| Company | What it does for Warden | Data it handles | Where |
|---|---|---|---|
| Hetzner Online GmbH, Germany | Hosts the server Warden runs on, including the database, uploaded documents and backups | All Warden data | Helsinki, Finland |
| Brevo CRM Solutions Private Limited, India (part of the Brevo group, based in France) | Delivers Warden's emails: sign-in links, notices, reminders and account emails | The recipient's name and email address, the email's subject and content, and delivery records | Servers in France and Belgium. Brevo's support teams and some of its own service providers may access data from India and the USA. |
When a member of staff switches on notifications, their browser maker's push service (Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge) carries each notification to their device. The notification is encrypted so that only that device can read it; the push service sees only the device's push address. These services are part of the browser the person chose, we have no contract with them, and they are not sub-processors.
Warden is built and run by Zelicra Technologies Private Limited in India. Our team accesses Warden from India to provide and support it; how that is protected is explained in section 6 of our Privacy Policy and Annex 4 of our Data Processing Agreement.
We email the managers of every care home at least 30 days before we add or replace a sub-processor. A home can object, as set out in clause 6 of the Data Processing Agreement. The date at the top of this page shows when the list last changed.
These do not receive care home records, so they are not sub-processors. They are explained in section 5 of our Privacy Policy: