Sub-processors

Last changed on 15 October 2026.

These companies handle personal data for Dovalis, each under a contract that binds it to protect the data at least as well as our data processing agreement does.

  • Supabase

    The database, the logins and the stored files.

    Contracted company
    Supabase Pte. Ltd., Singapore.
    Where
    Frankfurt, Germany.
    Outside the EU
    Standard contractual clauses.

  • Vercel

    Hosting: it runs the application.

    Contracted company
    Vercel Inc., United States.
    Where
    The application runs in Frankfurt, Germany; pages pass through its network worldwide.
    Outside the EU
    Standard contractual clauses.

  • Resend

    Sending email, for Dovalis and for the businesses that use it.

    Contracted company
    Plus Five Five, Inc., United States.
    Where
    Ireland.
    Outside the EU
    Standard contractual clauses.

  • Cloudflare

    The dovalis.com domain name, and passing on email sent to Dovalis's own addresses.

    Contracted company
    Cloudflare, Inc., United States.
    Where
    Its network, worldwide.
    Outside the EU
    Standard contractual clauses.

  • Amazon Web Services

    Receiving the copies of emails a business sends to its Dovalis address in Bcc: their envelope, headers and checks, never their content.

    Contracted company
    Amazon Web Services EMEA SARL, Luxembourg.
    Where
    Frankfurt, Germany.
    Outside the EU
    Standard contractual clauses.

  • Stripe

    Charging for paid plans: the paying business's billing details and how it pays. Never testimonials.

    Contracted company
    Stripe Payments Europe, Limited, Ireland.
    Where
    The European Union and the United States.
    Outside the EU
    Standard contractual clauses.

  • StartCo

    Issuing Dovalis's invoices and sending them to the Romanian tax authority: the paying business's billing details. Never testimonials.

    Contracted company
    STARTCONTABILITATE S.R.L., Romania.
    Where
    Romania.
    Outside the EU
    Not sent outside the EU.

Standard contractual clauses: the European Commission's clauses in each company's contract with us, which protect the data outside the European Union.

Data is encrypted in transit and where it is stored. A company outside the European Union, or owned from outside it, is bound by the standard contractual clauses to tell us of a request from a public authority for the data, and to challenge one it considers unlawful, as far as the law allows.