Sub-processors
Effective 22 May 2026 · last updated 14 October 2026
Dokaz uses the third-party services below to process data on your behalf. We notify customers in advance of material changes to this list. Last updated 12 October 2026.
| Sub-processor | Purpose | Data |
|---|---|---|
| Fly.io (United States) | Application hosting, drill execution, and evidence storage | All Service data in transit; restore sandboxes, the temporary drill databases, early-access backup files, and signed evidence PDFs at rest |
| Cloudflare R2 | Temporary storage of backups you push to us (when push uploads are enabled) | Pushed backup files, deleted after their drill (at most 7 days) |
| Neon (AWS us-east-1) | Primary application database | Account, user, drill, and audit records |
| Stripe | Billing | Billing contact + payment data (held by Stripe, not us) |
| Postmark | Transactional email | Recipient email address + message content |
| Google Firebase Cloud Messaging | Push notifications to the Dokaz mobile app | Device push tokens + alert text (drill and check-in status) |
| PostHog | Product analytics (when enabled) | Pseudonymous account/user IDs + event names |
| Sentry | Error tracking (when enabled) | Error diagnostics tagged with an account ID |
PostHog, Sentry and Cloudflare R2 are integrated but switched on per deployment; they are listed so that enabling them does not change this list. DNS for dokaz.net is served by Cloudflare in DNS-only mode — no Service traffic or customer data passes through it.
Questions about a sub-processor: privacy@dokaz.net.