Subprocessors
The third-party services Doyna uses to operate the platform. Last updated when this page was deployed.
How to subscribe to changes
Email [email protected] with the subject “Subprocessor update subscription”. We notify subscribers at least 15 days before any new subprocessor begins processing customer personal data.
1. Infrastructure & operations
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare, Inc. | CDN, DDoS protection, Pages hosting, Workers (contact / releases / stats), edge caching, analytics. | IP address (transient), request metadata. No message content. | Global edge; account region: EU. | SCCs (Module 2). |
| Resend (Resend, Inc.) | Transactional email delivery for the marketing contact form (doyna.ai/contact). | Email address, name, message body submitted on the contact form. | EU region (eu-west-1). | SCCs (Module 2). |
| Google Workspace (Google Ireland Ltd.) | Inbox for [email protected] (where contact-form messages are forwarded and where customer email lands). | Email correspondence between you and the Doyna team. | Ireland / EU. | Adequacy decision (Google Ireland Ltd.) + SCCs for Google LLC. |
2. Identity & product integrations
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Microsoft Corporation (Microsoft Graph) | OAuth identity and mailbox / calendar access for users who sign in with Microsoft. | OAuth identity (subject, email, name, tenant), mailbox content and calendar (read on your behalf when you request actions in Doyna). | Tenant region (typically EU for EU customers). | Adequacy decision (EU/EEA tenants); SCCs otherwise. |
| Google LLC (Gmail / Calendar APIs) | OAuth identity and mailbox / calendar access for users who sign in with Google. | OAuth identity (subject, email, name), Gmail and Calendar content (read on your behalf when you request actions in Doyna). | Global; Google chooses region. EU/US data centers. | SCCs (Module 2). |
3. AI inference (when enabled)
Doyna supports three AI inference modes, selectable per tenant. Only the mode(s) configured for your tenant are active subprocessors for you.
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| OpenAI, L.L.C. | Large-language-model inference for the AI assistant (selectable per tenant). | AI prompts, conversation context, uploaded files you attach to the AI. No mailbox content unless you explicitly include it in a prompt. | United States. | SCCs + OpenAI Data Processing Addendum. Model training disabled (zero data retention configured per OpenAI's ‘no-training’ API policy). |
| Anthropic, PBC | Large-language-model inference for the AI assistant (selectable per tenant). | AI prompts, conversation context, uploaded files you attach to the AI. | United States. | SCCs + Anthropic Data Processing Addendum. Model training disabled. |
Self-hosted alternative
| Vendor | Purpose | Categories | Region | Transfer mechanism |
|---|---|---|---|---|
| Customer-operated LLM (self-hosted / on-premises) | If your tenant is configured for self-hosted inference, Doyna does not send AI data to OpenAI or Anthropic. | AI prompts and uploaded files stay within your infrastructure. Doyna acts as the orchestration layer only. | Customer-chosen. | Not applicable — no third-party transfer. |
Questions or objections
Under our DPA (/dpa), customers may object to the addition of a new subprocessor within the 15-day notice window. See the DPA for the procedure. For all other questions email [email protected].