AtlacareAll of your data in Atlacare is stored in EU regions. This is a deliberate design choice, not a configuration option you have to find and switch on — it applies to every account.
Why EU-only matters
Patient health data is special category data under Article 9 of the UK and EU GDPR. Keeping it within the EU means your practice avoids the added complexity and legal risk of transferring special category data outside the UK/EEA. It's one of the main reasons Atlacare exists as a UK- and EU-focused platform rather than a global one.
What this covers
EU residency applies across the platform, including:
- Your database — patient records, appointments, clinical notes, and invoices.
- File uploads — patient files, letters, and logos are stored in EU object storage, and are only ever served through short-lived signed links, never public URLs.
Sub-processors
A few trusted providers process data on Atlacare's behalf — for email, SMS, payments, and error monitoring. These are listed in Who are your sub-processors?, along with what each one handles.
What we never do
Atlacare never sends patient health information to marketing tools, and never uses patient data to train AI. Transactional messages carry only what's needed — a name, an appointment time, an invoice total in £.
Need something in writing for your own records or a client's due-diligence request? Use the Help button in the top bar and we'll help.