Legal
Sub-processors
The third parties that process personal data on doconvoy's behalf, what each one does, the data it handles, and where it is located.
Last updated: September 2026
To run doconvoy we use a small number of third-party providers that may process personal data on our behalf. Each is engaged under data-protection terms no less protective than those in our Data Processing Agreement, and we remain responsible for their handling of the data. Most content in doconvoy is encrypted in your browser before it reaches us, so what these providers hold is ciphertext we have no key for.
Current sub-processors
| Provider | Purpose | Data it may process | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Application hosting, storage, transactional email delivery, and content delivery | Account and session records, the encrypted event log, tokens and file metadata, encrypted file content, and the recipient address and message body of transactional emails (sign-in codes, links, notices) | EU |
| Stripe | Payment processing | Billing contact email, billing metadata, and your card's brand and last four digits (full card details stay with Stripe) | United States, under Standard Contractual Clauses |
Marketing site analytics
Our public marketing website at doconvoy.com uses Simple Analytics for privacy-friendly, cookieless analytics. It is used for the marketing site only, not the doconvoy application, and does not set cookies. See our Cookie Policy.
Changes
We will post changes to this page and, where a new or replacement sub-processor will handle personal data we process for a customer, give that customer notice beforehand so they can object on reasonable data-protection grounds. For questions, contact privacy@doconvoy.com.