Sub-processors
This is a translation for your convenience. The Dutch version is binding.
Non-binding translation. The Dutch page and the Dutch data processing agreement prevail.
Last updated: 9 October 2026
Sendis is a service of Neolyth (sole proprietorship, KvK 95055592, Nijmegen, the Netherlands). Neolyth processes messages and other personal data as a processor on behalf of healthcare providers. For part of that processing Neolyth engages the sub-processors below. This page reproduces the list in Annex B of the data processing agreement. If they differ, the data processing agreement prevails.
Current sub-processors
| Sub-processor | Country of parent company | What they do | Which data | Where |
|---|---|---|---|---|
| IONOS SE | Germany | Hosting of the service and database, edge gateway, key management, storage of messages, attachments and backups | all service data; messages, attachments and backups encrypted | Germany; object storage region eu-central-4 |
| Cyso Cloud B.V. | Netherlands | Sending notification emails and verification codes | recipient email address, sender and practice name, links, verification codes and, in the reminder email before a message expires, the subject of that message; never attachments or keys; message text only in a copy of their own message requested by the sender via the contact link | Netherlands |
| Amazon Web Services EMEA SARL | United States | Sending SMS codes | telephone number, code | Frankfurt, Germany (region eu-central-1) |
Amazon Web Services belongs to a group with a parent company in the United States. Processing takes place in the EU.
Not a sub-processor
- Neolyth's own infrastructure in the Netherlands: operational logs.
- Mollie B.V. (Netherlands): payments. Mollie is an independent controller; Neolyth is itself the controller of billing data.
- Worldstream B.V. (Netherlands): hosting of the website sendis.eu, the visitor statistics (Umami) and the waiting list. Neolyth is itself the controller for this data. Messages, attachments and account data of the service do not pass through this server.
- Visitor statistics for the sendis.eu website: Umami, managed by Neolyth itself on our server at Worldstream in the Netherlands. This concerns website visitors only, not the data Neolyth processes for clients. Neolyth is the controller for it. See the privacy statement, 9.5.
- Telegram: technical uptime alerts without personal data.
Sendis uses no trackers, advertising networks, external fonts or third-party analytics services. No statistics of any kind run in the app or the portal.
Changes
Neolyth notifies its customers by email at least thirty days in advance of a new or replacement sub-processor, or a change of role or location, and updates this page at the same time. A customer may object within those thirty days. If the objection is not resolved, the customer may terminate the agreement free of charge. The full mechanism is in Article 8 of the data processing agreement.
Previous versions
| Date | Change |
|---|---|
| 5 October 2026 | First publication |
| 8 October 2026 | Key management added for IONOS; Worldstream named as host of the website; references to the data processing agreement corrected; email copy of a contact-link message named; role of Mollie stated |
| 9 October 2026 | Added a note on the website visitor statistics. No change to subprocessors. |
Questions: hello@neolyth.io