Systems for Owner-Led Trade Businesses

This page lists the Sub-processors that Dovito® Business Solutions, Ltd. uses to process Customer Personal Data, as described in Annex III of our Data Processing Agreement. Defined terms have the meanings in that agreement.

Current as of version v2026.10. The current list is published at dovito.com/legal/subprocessors and is updated under Section 8 of the Data Processing Agreement.

Sub-processor	Purpose	Customer Personal Data involved	Location
DigitalOcean, LLC	Application hosting and file storage	All Customer Personal Data stored in the Platform	United States
Vercel Inc.	Legacy file storage	Files held in legacy storage	United States
Stripe, Inc.	Payment processing	Billing contacts and transaction information for Platform purchases and payment features Customer enables	United States
OpenAI, L.L.C.	AI Services	Content submitted to AI features	United States
Anthropic, PBC	AI Services	Content submitted to AI features	United States
Perplexity AI, Inc.	AI Services	Content submitted to AI features	United States
PostHog, Inc.	Product analytics, feature flags, in-app surveys, and opt-in session recordings	Internal User IDs and roles, usage events, and masked session recordings where a User enables them	United States
Google LLC	Sign in with Google	User name, email address, and account identifier	United States
Apple Inc.	Sign in with Apple	User name, email address, and account identifier	United States
HighLevel, Inc. (LeadConnector)	CRM, email, and SMS messaging used to deliver the Services	Contact details and message content	United States
Mailgun Technologies, Inc.	Transactional email	Recipient email addresses and message content	United States
Twilio Inc. (SendGrid)	Transactional email	Recipient email addresses and message content	United States
Cloudflare, Inc.	Bot protection and network security	Network and request data, such as IP addresses	Global network
Ably Real-time Ltd.	Real-time updates within the Platform	Content of real-time messages in transit	United States and other regions where the provider operates
Upstash, Inc.	Caching and rate limiting	Cached data and identifiers used for rate limiting	United States
ClickUp (Mango Technologies, Inc.)	Support, feedback, and project management	Customer Personal Data included in support requests, feedback, and project records	United States
GitHub, Inc.	Software development and issue tracking	Customer Personal Data incidentally included in code, configuration, or issues	United States
Brandfetch	Public brand information for business profiles	Company domain names; not intended to receive Customer Personal Data	United States
Independent contractors	Delivery of Services under written confidentiality obligations	Customer Personal Data needed for the engagement	United States, the Philippines, and Belize

Notes:

The following are not Sub-processors of Customer Personal Data, because they receive only Dovito Controller Data for Dovito's own purposes: Meta Platforms, Inc. (advertising measurement on Dovito's website and public pages) and Google Analytics (website analytics for signed-out visitors).