Sub-processors

Our sub-processors are trusted third-party entities that assist in providing and maintaining Medical Tracker while adhering to strict data protection and security standards to ensure the integrity and confidentiality of user data.

Medical trackers website displayed on a computer screen

Amazon

Application web services.

This is used to store student and staff data on Medical Tracker. All data is encrypted in transit and at rest, which means that even if there were a breach, the information would not be accessible.

You can find out more on security for Amazon AWS here: https://aws.amazon.com/security/

MongoDB

Database Provider.

MongoDB: Is also used for storing data, and as with Amazon AWS, all data is encrypted in transit and at rest, which means that even if there were a breach, the information would not be accessible.

You can find out more about security for MongoDB here: https://www.mongodb.com/docs/manual/security/

Auth0

Identity management system.

A secure way to authenticate and authorise services and applications - this only includes staff log-in information and is used for SSO and MFA.

More information about Auth0 security can be found at: https://auth0.com/security

Additional sub-processors used for pupil, staff and parent/carer data which links the school’s management information system to Medical Tracker.

Data is synced regularly to ensure data is up to date. Medical Tracker supports the use of.

Groupcall

Customer Xporter.

Groupcall Xporter is used to ensure that student, staff and parent contact details are up-to-date on Medical Tracker. 18,000 schools use Groupcall Xporter.

You can find out more about security for Groupcall Xporter here: https://support.groupcall.com/xporter/xvault-security

Wonde

MIS integration provider.

Wonde is used to ensure that student, staff and parent contact details are up-to-date.

You can find out more about security for Wonde here: https://www.wonde.com/security/

Software used by the Medical Tracker team.

Medical Tracker is the data controller for personal data, including customer contact details, billing information, and website enquiries. The following service providers process this data on our behalf as data processors, under written agreements that require them to protect it and use it only on our instructions. These providers do not process data held within the Medical Tracker platform.

Hubspot

Customer relationship management.

Our marketing, sales and support teams use Hubspot to help with the running of the website and content resources to support customers (website pages, blogs and case studies).

You can find out more about data used with Hubspot here: https://community.hubspot.com/t5/9881-Operations-Hub/Security-and-Privacy-concern/td-p/434226

Google

Workspace applications.

Productivity apps used by the Medical Tracker team like Gmail, Google Calendar and Google Docs. They help our team to communicate effectively and securely.

Find out more information on how Google uses data for its productivity apps here: https://workspace.google.com/intl/en_uk/security/

Chargebee

Subscription and billing management.

Used by Medical Tracker as a subscription management and billing platform.

More information about Chargebee security can be found at: https://www.chargebee.com/security/

Anthropic

Administrative support

From 10th November 2026

Support administrative tasks through the use of AI.

Used by Medical Tracker to support internal administrative processes and improve operational efficiency. Claude does not access or process any personal data held within the Medical Tracker platform and is not used for any automated decision-making.

More information about Anthropic's security can be found at: https://trust.anthropic.com/