Sub-processors
Last updated: 2 November 2026
Your practice controls its patients’ records and what it records about its team. Symly Ltd. processes that information for you, and uses the service providers below to do it. Each one works only on our instructions, under a written agreement that protects the information.
| Provider | What it does | Information it handles | Where |
|---|---|---|---|
| Railway | Runs the Symly apps and scheduled jobs | Everything that passes through the apps | UK or EEA |
| Supabase | Database and live screen updates | All stored records, including patient records | UK or EEA |
| Cloudflare | File storage | Patient documents and images, and data exports | UK or EEA |
| Resend | Sends email | Email addresses and the content of emails the apps send | UK or EEA |
| The SMS Works | Sends text messages | Patients’ mobile numbers and the content of texts | UK or EEA |
| Sentry | Error reports | Technical details of faults, with patient details, internet addresses and cookies removed | UK or EEA |
Information outside the UK and EEA
These providers keep information in the UK or the European Economic Area. Where a provider can access it from elsewhere, for example to give support, it is protected by an adequacy decision or approved contractual safeguards.
Not sub-processors
When your practice submits NHS claims through Symly, they go to the NHS Business Services Authority, which uses them as a controller in its own right. This website and our enquiry email use GitHub, Cloudflare and Hostinger, as our privacy policy explains; they do not handle practice data.
Changes
We tell practice managers by email before we add or replace a sub-processor, so your practice can raise any objection. For questions, email support@symlydental.com.