# Donut

Donut (donut.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/donut
- Documents last verified: 2026-09-30
- Transparency rating: 79/100 (how much it publishes, not how secure it is)
- Cite as: Donut, Third Party Index, https://thirdpartyindex.com/vendors/donut (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.donut.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://trust.donut.com/subprocessors | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://www.donut.com/dpa/ | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://www.donut.com/privacy/ | 2026-09-30 | 2026-09-30 |
| Terms | https://www.donut.com/terms/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (37)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud hosting, servers, and databases | United States | 2026-09-30 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) | Anthropic does not use customer data to train their models, and AI use is optional within the product.; Content generation | United States | 2026-09-30 |
| [Canva](https://thirdpartyindex.com/vendors/canva.md) | Content design and creation | United States | 2026-09-30 |
| [CircleCI](https://thirdpartyindex.com/vendors/circleci.md) | Code delivery/deployment pipeline | United States | 2026-09-30 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | DNS management | United States | 2026-09-30 |
| Convex | Handles our back-end data operations and ensuring secure data processing and storage for some Donut applications. | United States | 2026-09-30 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Metrics gathering and monitoring | United States | 2026-09-30 |
| [Fullstory](https://thirdpartyindex.com/vendors/fullstory.md) | Web app usage and support | United States | 2026-09-30 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | Code management and version control | United States | 2026-09-30 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Email, docs, and analytics | United States | 2026-09-30 |
| [Heroku](https://thirdpartyindex.com/vendors/salesforce.md) | App hosting and database | United States | 2026-09-30 |
| [Hevo Data Inc.](https://thirdpartyindex.com/vendors/hevo-data.md) | Syncing data from production data stores to data warehouse | United States | 2026-09-30 |
| [Hubspot](https://thirdpartyindex.com/vendors/hubspot.md) | Customer relationship management and marketing | United States | 2026-09-30 |
| [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Support via live chat and email, key customer updates | United States | 2026-09-30 |
| [Langfuse](https://thirdpartyindex.com/vendors/langfuse.md) | Monitoring LLM performance | United States | 2026-09-30 |
| [Linear](https://thirdpartyindex.com/vendors/linear.md) | Tracking customer feedback and roadmap planning | US | 2026-09-30 |
| [MailChimp](https://thirdpartyindex.com/vendors/mailchimp.md) | Newsletter for users who opt in | United States | 2026-09-30 |
| [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md) | Service emails | United States | 2026-09-30 |
| [Merge](https://thirdpartyindex.com/vendors/merge-api.md) | \*Optional\* subprocessor for customers that choose to integrate their Human Resources Information System (HRIS) with Donut | United States | 2026-09-30 |
| [Mixpanel](https://thirdpartyindex.com/vendors/mixpanel.md) | Aggregate usage tracking | United States | 2026-09-30 |
| [Notion](https://thirdpartyindex.com/vendors/notion-com.md) | Documentation and note-taking | United States | 2026-09-30 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) | Generate content to be used in Donut products; OpenAI is contractually obligated to NOT use customer data in training its models. Use of AI is optional within the product. | United States | 2026-09-30 |
| Profitwell | Financial analysis | United States | 2026-09-30 |
| [Railway](https://thirdpartyindex.com/vendors/railway.md) | Used for hosting front end and back end web application and their related assets and internal services. | United States | 2026-09-30 |
| [Recall.ai](https://thirdpartyindex.com/vendors/hyperdoc-a-k-a-recall-ai.md) | Used to power secure transcripts and automated agendas for Indigo customers | — | 2026-09-30 |
| [Resend](https://thirdpartyindex.com/vendors/resend.md) | Sends transactional emails and monitoring email performance for some Donut applications. | United States | 2026-09-30 |
| [Rillet](https://thirdpartyindex.com/vendors/rillet.md) | Accounting | United States | 2026-09-30 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | Application Monitoring | United States | 2026-09-30 |
| [Sisense (formerly Periscope Data)](https://thirdpartyindex.com/vendors/sisense.md) | Aggregate usage analysis | United States | 2026-09-30 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Internal messaging | United States | 2026-09-30 |
| [SolarWinds](https://thirdpartyindex.com/vendors/solarwinds.md) | Log aggregation | United States | 2026-09-30 |
| [Storylane](https://thirdpartyindex.com/vendors/storylane.md) | Sales and marketing demos; Used for creating and sharing interactive product demos for sales and marketing purposes. | US | 2026-09-30 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payment collection and handling | United States | 2026-09-30 |
| [Tremendous](https://thirdpartyindex.com/vendors/tremendous.md) | Gift card fulfillment | United States | 2026-09-30 |
| [Vercel](https://thirdpartyindex.com/vendors/vercel.md) | Hosting and delivering front-end applications. | United States | 2026-09-30 |
| [Viktor](https://thirdpartyindex.com/vendors/viktor.md) | Internal productivity; Used for internal productivity and workflow automation via an AI assistant integrated within Slack. Viktor does NOT use customer data in training its models. | US | 2026-09-30 |
| [Zoom](https://thirdpartyindex.com/vendors/zoom.md) | User research, customer support, sales | United States | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/22006)). CSV: https://thirdpartyindex.com/vendors/donut/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/22005))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api