DoneThat uses the following subprocessors to provide the service. We review them for security, privacy, and operational fit, and we update this list when the vendor set changes.
Google Cloud Platform
Cloud infrastructure, hosting, AI models and authentication services (including Firebase, Vertex AI)
Purpose of Processing
Hosting of DoneThat services and data processing infrastructure, AI models, and handling user authentication
Data Location
EU (Belgium) for data, compute, and AI models; US for Firebase Authentication
Last Updated
2025-12-12
Google Analytics
Web and application analytics
Purpose of Processing
Usage analytics and website performance monitoring
Data Location
Global
Last Updated
2025-12-01
Audienceful
Email marketing platform
Purpose of Processing
Marketing communications and newsletters
Data Location
US
Last Updated
2025-12-01
Relevant Links
Postmark
Transactional email service
Purpose of Processing
Delivery of transactional emails (account notifications, password resets, etc.)
Data Location
US
Last Updated
2025-12-01
Stripe
Payment processing platform
Purpose of Processing
Processing subscription payments and billing
Data Location
Global
Last Updated
2025-12-01
Cloudflare
CDN, DDoS protection, and web security
Purpose of Processing
Content delivery, security protection, and traffic routing
Data Location
Global
Last Updated
2025-12-01
Slack
Team communication and community platform
Purpose of Processing
User community management and support
Data Location
US
Last Updated
2025-12-01
This list was last updated on December 12, 2025. We will update this page when we make changes to our subprocessors.