Sub Processor List



Simple Healthcare Ltd (“SH”)

SH provides independent reviews, case studies and evidence of how Florence change lives, from the collaborative, NHS members community. They share best practice on getting started with protocols and provide training in using Florence. Community members also receive detailed analysis reports on Florence usage

Google Analytics (anonymous aggregated behaviour tracking)

Google Analytics collects statistical data about the use of the website and applications. The information we see is aggregated and does not contain any personal identifiable data. We use the information to understand the way people engage in the website. Here is the Google Analytics privacy policy:


Mediaburst uses Bitrix24 as the Customer Relationship Management (CRM) to receive and log
customer tickets for issues, whether they are technical or operational in nature. Name, email
address and transaction data is shared with the third party for account management and support,
marketing and analysis purposes. Please see here the Bitrix24 Privacy Policy:


Hubspot is being used as the Sales tool by our sales team to track potential customer
contacts and interactions as well as sales and marketing campaigns sent out. The data
included is name, work emails and organisational details. The HubSpot privacy notice is

SMS Network Providers

Mediaburst use SMS aggregators and networks to deliver text messages as a necessary part of
the service. All SMS aggregators are required to comply with data proception obligations. If the
SMS Aggregator transfers personal data outside of the EU/ EEA, such data transfer will only be
made using European Commission standard contractual clauses for data transfers outside of the
EU or EEA knows as the “model clauses”.

We use a roster of SMS aggregators for resilience, including:
CLX Networks AB (trading as Sinch)

AWS – Cloud Hosting

The web server, application server instances are AWS AMIs hosted within securely within an
AWS Virtual Private Cloud (VPC). The DB is an AWS Relational Database Service (RDS) instance also hosted in a dedicated VPC. The servers are hosted within the AWS UK region,
across two availability zones.

The AWS privacy notice can be found here:


The Florence-3 core database is a managed service by MongoDB and hosted in AWS UK
region, across two availability zones (privacy notice as above). MongoDB privacy notice can be
found here:

Microsoft (email provider)

Microsoft provides Mediaburst Ltd and its owners ART Healthcare Software Ltd with email services for our employees. If you communicate directly with them over email the communication is likely to go through Microsoft servers. Here is the Microsoft365 privacy policy:

Moneypenny (phone answering service)

Moneypenny operates the call centre service for Mediaburst Ltd. If you call the main contact number the call will be answered by a Moneypenny operator and transferred to the appropriate person within the Mediaburst team. If that person is not available they will take a message and pass this on. The link to Moneypenny’s privacy policy is here:

Jira Helpdesk (Atlassian)

Jira provides the system that the Florence help desk is run on. This enables customers to raise
issues and questions regarding the Florence platform – either by raising a direct ticket or by
emailing Here is the link to the Atlassian GDPR commitment:

Links to Third Party Service Providers

Where we have provided links to Third Party Service Providers these are links that were applicable at the time of writing. The links may since have changed.