L-04Sub-processors
Subprocessors
The third-party services Doyna uses to operate the platform. Last updated when this page was deployed.
How to subscribe to changes
Email [email protected] with the subject “Subprocessor update subscription”. We notify subscribers at least 15 days before any new subprocessor begins processing customer personal data.
1. Infrastructure & operations
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare, Inc. | PurposeCDN, DDoS protection, Pages hosting, Workers (contact / releases / stats), edge caching, analytics. | CategoriesIP address (transient), request metadata. No message content. | RegionGlobal edge; account region: EU. | Transfer mechanismSCCs (Module 2). |
| Resend (Resend, Inc.) | PurposeTransactional email delivery for the forms on doyna.ai/contact and doyna.ai/brief. | CategoriesThe email address and message body you submit. The forms ask for nothing else — no name, company or phone field exists. | RegionEU region (eu-west-1). | Transfer mechanismSCCs (Module 2). |
| Google Workspace (Google Ireland Ltd.) | PurposeInbox for [email protected] (where contact-form messages are forwarded and where customer email lands). | CategoriesEmail correspondence between you and the Doyna team. | RegionIreland / EU. | Transfer mechanismAdequacy decision (Google Ireland Ltd.) + SCCs for Google LLC. |
2. Identity & product integrations
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Microsoft Corporation (Microsoft Graph) | PurposeOAuth identity and mailbox / calendar access for users who sign in with Microsoft. | CategoriesOAuth identity (subject, email, name, tenant), mailbox content and calendar (read on your behalf when you request actions in Doyna). | RegionTenant region (typically EU for EU customers). | Transfer mechanismAdequacy decision (EU/EEA tenants); SCCs otherwise. |
| Google LLC (Gmail / Calendar APIs) | PurposeOAuth identity and mailbox / calendar access for users who sign in with Google. | CategoriesOAuth identity (subject, email, name), Gmail and Calendar content (read on your behalf when you request actions in Doyna). | RegionGlobal; Google chooses region. EU/US data centers. | Transfer mechanismSCCs (Module 2). |
3. AI inference
There is no sub-processor here. Inference runs on a model inside your own infrastructure, which is why the rest of this page is short: nobody outside your network receives a prompt, a document or an answer.
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Your own LLM, on your own hardware | PurposeEvery AI request is answered by a model running inside your infrastructure. There is no third-party inference provider. | CategoriesAI prompts and uploaded files stay within your infrastructure. Doyna is the orchestration layer only. | RegionWherever your hardware is. | Transfer mechanismNot applicable — nothing is transferred to anyone. |
Questions or objections
Under our DPA (/dpa), customers may object to the addition of a new subprocessor within the 15-day notice window. See the DPA for the procedure. For all other questions email [email protected].