Where data rests

THOS records do not rest in Tanzania. They rest on managed infrastructure outside the country, and this page names exactly where. No real patient record is in it yet: no facility is connected anywhere.

This is an unresolved legal question, not a settled engineering choice. Somebody deciding whether this system is fit to hold Tanzanian health records needs that fact before they decide, not after.

The actual regions

Read off the running infrastructure, not off a diagram

Database and stored files: AWS eu-west-1 · IrelandPostgres, the audit log, and nine storage buckets: laboratory images, radiology, voice notes and profile pictures. Operated by Supabase.
The public pages: Vercel iad1 · Washington, DCThese pages. They carry no patient record: they are rendered from text held in the source, server-side.
The reader's own device: Wherever they areThe application keeps a copy of the record on the device so it works without a connection. That copy is on the person’s own device and goes when they sign out.

What is not settled

The Tanzania Personal Data Protection Act 2022 and the Personal Data Protection Commission set conditions on moving personal data out of Tanzania. THOS has not been mapped against those conditions, is not registered with the Commission, and has taken no legal advice on the basis for holding Tanzanian health data in Ireland.

None of that is required today, because there is no real patient record in the system. All of it is required before the first facility connects, and this page will say when each was done and by whom.

Asking about this

Questions about personal data and this Act: info@laetoli.tz.