Subprocessors
Last updated: 1 June 2026
1. Overview
The list below describes subprocessors used by Doqubox for specific parts of service delivery. Doqubox selects providers with a focus on operational reliability, security, and data protection commitments.
Where a provider processes customer personal data outside the EEA, Doqubox applies appropriate transfer safeguards where required.
2. Current subprocessors
-
Hetzner Online GmbH (Germany) - hosting, object storage, and SMTP.
Purpose: application hosting, database infrastructure, object storage, backups, and outbound email transport.
Data categories: file content, account data, document exchange metadata, operational logs, and email metadata.
Region and safeguards: Germany/EU infrastructure where used for Doqubox services.
-
Bird B.V. (Netherlands) - SMS verification (OTP).
Purpose: sending one-time verification codes for recipient verification.
Data categories: phone number and SMS metadata.
Region and safeguards: Netherlands-based provider; telecom delivery may involve carrier networks.
-
Mollie B.V. (Netherlands) - payments and mandates.
Purpose: subscription payments, direct debit mandates, payment status, and invoices.
Data categories: payment-related identifiers, billing details, mandate references, and transaction metadata.
Region and safeguards: Netherlands/EU-oriented payment provider.
-
Google Ireland Limited (Ireland) - website analytics, when analytics are enabled and consent is provided.
Purpose: measuring website usage and marketing performance on public pages.
Data categories: cookie identifiers, device/browser information, page views, and event data.
Region and safeguards: EU provider entity; international transfers may rely on Google's applicable safeguards where required.
3. Changes
We may change subprocessors when required for service delivery, security, or business operations. This page is updated when the list changes materially.
Customers with specific procurement or notice requirements can contact support@doqubox.com.