Subprocessors and service providers

1. Overview

Subprocessors handle personal data on customers' behalf under our DPA. We also list providers for Doqubox's own billing and website analytics, which are outside that DPA. Document hosting is separate from these services and SMS verification.

2. Subprocessors and other service providers

• Hetzner Online GmbH (Germany)

  Subprocessor for hosting, databases, object storage, backups, and outbound email.

  Data: end-to-end encrypted files and metadata, account data, exchange records, logs, and email delivery metadata.

  Processing: EU; document storage in Nuremberg, Germany.

• Bird B.V. (Netherlands)

  Subprocessor for SMS verification codes.

  Data: phone numbers and SMS metadata.

  Processing may occur outside the EEA, with appropriate transfer safeguards where required.

• Mollie B.V. (Netherlands)

  Provider for Doqubox's own billing, payments, mandates, and invoices; not a subprocessor under our DPA.

  Data: payment identifiers, billing details, mandate references, and transaction metadata.

  Processing may occur outside the EEA, with appropriate transfer safeguards where required.

• Google Ireland Limited (Ireland)

  Provider for Doqubox's own public website analytics, when enabled with consent; not a subprocessor under our DPA. Analytics are separate from document upload and download flows.

  Data: cookie identifiers, device/browser information, page views, and events.

  International transfers may rely on Google's applicable safeguards where required.

3. Changes

For subprocessors, including those engaged by our subprocessors for customer data, we email account administrators at least 14 calendar days before additions, replacements, or processing-location changes. We also update this list.

Customers have 14 calendar days after notice to object. A disputed change is held while we seek a solution; if none is agreed within 14 calendar days of receiving the objection, the affected subscription ends without penalty unless the customer withdraws its objection, and unused prepaid fees are refunded. If a subprocessor gives insufficient notice, we notify customers without delay. We suspend affected processing where possible to preserve the notice period and objection procedure; where that is not possible, the customer may terminate immediately with a refund. DPA section 8 sets out the full procedure.