Data processing & sub-processors

For referral data, LibaMed acts as processor to the referring clinician’s organisation (controller), under a data-processing agreement incorporating the corridor’s transfer mechanism. For clinician account data, LibaMed is the controller.

Infrastructure providers under evaluation are listed with the safeguard each will operate under. This table becomes binding when hosting contracts are signed; we give notice before any change that touches patient data.

Every sub-processor touching patient data is bound to the same encryption, residency, and audit obligations we carry. A clean export-and-delete of a corridor’s data is contractually guaranteed from day one (reversibility), so no provider ever becomes a lock-in on patient records.