iCenna Sub-Processor List
Sub-processors engaged under the iCenna Data Processing Agreement
Version: 1.0
Last Updated: 23-08-2026
This page lists the sub-processors that iCenna Company (“iCenna”) engages to process Personal Data on behalf of its customers in connection with the iCenna cloud Services, as contemplated by Section 5 and Annex 3 of the iCenna Data Processing Agreement (the “DPA”), available at https://iCenna.com/data-processing-agreement. Capitalised terms have the meanings given in the DPA.
1. AI Processing — No Third-Party AI Provider
The iCenna AI Features are developed, owned and operated by iCenna itself. All AI model hosting and inference involving Personal Data is performed by iCenna software running within iCenna’s dedicated tenancy on Oracle Cloud Infrastructure (Jeddah region, Kingdom of Saudi Arabia). Oracle provides infrastructure only and is listed below as a hosting sub-processor; iCenna does not engage any third-party AI model provider as a sub-processor.
2. Current Sub-processors
| Sub-processor | Service Provided | Location of Processing | Transfer Safeguard (if outside KSA) |
| Oracle Corporation and its affiliates — Oracle Cloud Infrastructure (OCI) | Cloud infrastructure: hosting, storage and compute for the iCenna Services, APIs and AI Features (infrastructure only; no access to Personal Data for Oracle’s own purposes) | OCI Jeddah region, Kingdom of Saudi Arabia | Not applicable — processing within KSA |
| Oracle Corporation and its affiliates — OCI Email Delivery | Transactional email delivery (notifications, account and system emails) | OCI Jeddah region, Kingdom of Saudi Arabia | Not applicable — processing within KSA |
| 4Jawaly [confirm registered legal name] | SMS gateway for patient appointment reminders and notifications | Kingdom of Saudi Arabia | Not applicable — processing within KSA |
| Pusher Ltd | Real-time in-app notification channels (minimised payloads; see note below) | United Kingdom / European Union (cloud-hosted) | Same as Vercel |
Front-end delivery (not a sub-processor): the iCenna web application’s static front-end assets (scripts, styles and images) are delivered by Vercel Inc. (United States / global edge network). All API calls, Customer Content and Personal Data flow directly between the User’s device and iCenna’s systems in the OCI Jeddah region; no Personal Data is transmitted to or processed by Vercel. Vercel is therefore not a Sub-processor and is listed here for transparency only.
3. Changes to this List
iCenna will provide customers with at least thirty (30) days’ prior written notice (by email or portal posting) of any intended addition or replacement of a sub-processor, and will update this list accordingly. Customers may object on reasonable data protection grounds within the notice period, as set out in Section 5 of the DPA.
4. Contact
Questions about this list may be directed to DPO@iCenna.com


