Sub-processors

1. Current sub-processors

1.1 Under our Data Processing Agreement we use the following sub-processors to process personal data contained in Your Content: the templates, sample data, assets, render request data and generated documents you put into or create with the Service.

Sub-processor	Service	Location of processing	Transfer safeguard
UpCloud Oy	Hosting: servers, databases and object storage where all Service data is stored and rendered	Helsinki, Finland	Not needed, processing stays in the European Economic Area
BunnyWay d.o.o. (bunny.net)	Content delivery network: terminates encrypted connections and passes requests to our servers	Slovenia; edge locations worldwide, nearest to the sender	Standard contractual clauses for edge locations outside the European Economic Area

1.2 bunny.net does not cache API traffic. It handles request data only in transit, to pass it to our servers in Finland.

2. Other providers

2.1 We also use Stripe for payments, Mailjet for transactional email, and Google, GitHub and Microsoft for sign-in. They handle only our own account, billing and sign-in data, never Your Content, so they are not sub-processors under the DPA. They are listed in section 7 of our Privacy Policy.

3. Changes to this list

3.1 We email the owners of every workspace at least 30 days before a new sub-processor starts processing Your Content, and we show the upcoming change on this page.

3.2 You can object on reasonable data protection grounds by writing to privacy@doquill.com before the change takes effect. Section 6.3 of the DPA explains what happens next.