01What "subprocessor" means
A Subprocessor is a provider Dohos engages to process Personal Data on behalf of a Restaurant for the Restaurant-directed services covered by the activated Data Processing Addendum. A company isn't a Subprocessor merely because it sells software or infrastructure to Dohos, appears in source code or a public page, or is itself a subprocessor of one of Dohos's own providers — the actual purpose, instructions, and data access determine the role, not the label.
02Current subprocessors
No Subprocessor row is approved for publication in this draft.
| PROVIDER | SERVICE | PURPOSE | DATA CATEGORIES | PROCESSING LOCATION | MORE INFORMATION |
|---|
That deliberate empty table means only that no candidate vendor has cleared Dohos's diligence process for public listing yet. It does not mean Dohos runs its service on nothing — see the next section for what's disclosed instead, and why that's a different claim.
03Infrastructure, disclosed separately
Being named as infrastructure and being listed as an approved Subprocessor are different claims, deliberately kept apart on this site. The database, authentication, and backend hosting Dohos actually runs on are named directly at infrastructure, and the same empty register above — with the same explanation of what "empty" does and doesn't mean — is mirrored for a trust-center reader at /trust/privacy/subprocessors. Naming a vendor as infrastructure is not the same as clearing it for the approved-Subprocessor list; that status requires its own completed review.
04How a vendor is approved
Before authorizing a new or replacement Subprocessor for covered Restaurant data, Dohos must document the service need, complete privacy, security, legal, and payment/AI diligence proportionate to the risk, verify the provider's exact legal entity and configuration, approve the contract and technical controls, notify affected Restaurants with time to raise a reasonable objection, and create a controlled activation record before any production data actually flows — selection or code integration alone never authorizes production processing.