Subprocessors

Purpose

Celiums Solutions, LLC uses service providers to operate OncoRadar while remaining its sole operator. This is the only OncoRadar document that names those providers; other documents describe their roles neutrally. “Subprocessor” status depends on the specific customer relationship and applicable law; this operational list does not by itself determine legal roles.

Current providers

The currently identified providers are listed below with the role they perform and the data they receive. No infrastructure or model provider is identified as an OncoRadar operator.

• Amazon Web Services, Inc. — Cloud hosting, object storage, encryption and key management, managed identity and database services, OCR, identifier detection, clinical entity coding, medical imaging storage, logging and backups, research language models via Amazon Bedrock, and website delivery and sign-in protection via CloudFront and AWS WAF Challenge/CAPTCHA. Location: US East (N. Virginia) region, United States, for core application services, using HIPAA-eligible services under a Business Associate Agreement that the operator is putting in place; global edge locations for website delivery and sign-in security. Data: Account, workspace, conversation and operational data; uploaded documents and images (encrypted originals readable only by an isolated processing role); de-identified derivatives; retrieved literature; IP addresses and browser/session interaction signals for sign-in abuse prevention.
• TypeSafe AI, Inc. — Calibrated decision and classification model used to rank retrieved evidence, verify statements and classify de-identified documents. Location: Provider-operated cloud; region and contract disclosures pending confirmation. Data: Only de-identified text or literature passages; never images, original files, account identifiers or credentials.

Technology roles

The cloud provider hosts the application, encrypted object storage, key management, identity and database services, the OCR, identifier-detection and clinical entity coding services used for de-identification, the medical imaging store for de-identified DICOM, and the research language model. The decision model provider runs a calibrated decision and classification model that receives only de-identified text or literature, never images or original files. Technology attribution does not make a provider an OncoRadar operator.

Changes and diligence

Providers may be added, replaced or removed as the service evolves. A Business Associate Agreement with the cloud provider is being put in place; its status is not a certification. Material changes relevant to customer data will be posted in an updated version and handled under applicable customer commitments. Contract, transfer, region and deletion details remain subject to operational confirmation and legal review.