Legal
Sub-processors
This page lists Doro Technologies Ltd's current sub-processors, third-party providers who process personal data on Doro's behalf to deliver the platform. We update this list when our partner stack changes. Material changes are notified to users at least 30 days before they take effect.
For details of our overall approach to processing personal data, see our Privacy Policy.
| Sub-processor | Function | Jurisdiction | Transfer mechanism | DPA in place |
|---|---|---|---|---|
| Sumsub | Identity verification, sanctions, PEP, adverse media | UK / EU | Adequacy decision (UK and EU member states) | Yes |
| Licensed PSP partners | Custody, currency conversion, fiat settlement, regulated decisioning | UAE | Within UAE | Yes |
| AWS Middle East | Cloud infrastructure | Bahrain | Transfer assessment per DIFC DPL | Yes |
| Google Cloud | Cloud infrastructure (Dubai region for production data) | UAE | Within UAE | Yes |
| Resend | Transactional email delivery | United States | Standard Contractual Clauses | Yes |
| Meta (WhatsApp Business API) | WhatsApp interface and notifications | United States | Standard Contractual Clauses | Yes |
| PostHog | Product analytics (anonymised) | EU / United States | Standard Contractual Clauses | Yes |
| Vercel Analytics | Site analytics (anonymised) | United States | Standard Contractual Clauses | Yes |
| Google (sign-in services) | Optional Google sign-in for users | United States | Standard Contractual Clauses | Yes |
| UAE PASS | Federated identity authentication for UAE residents | UAE | Within UAE | Governed by UAE PASS terms |
For our compliance overview and supervisory controls, see the compliance page. For the contractual terms governing platform use, see the Terms of Service.