# Dotfile

Dotfile (dotfile.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/dotfile
- Documents last verified: 2026-09-29
- Transparency rating: 72/100 (how much it publishes, not how secure it is)
- Cite as: Dotfile, Third Party Index, https://thirdpartyindex.com/vendors/dotfile (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.dotfile.com/ | 2026-09-29 | 2026-09-29 |
| Subprocessor list | https://trust.dotfile.com/subprocessors | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://dotfile.com/privacy | 2026-09-29 | 2026-09-29 |
| Terms | https://dotfile.com/terms | 2026-09-29 | 2026-09-29 |
| Status page | https://status.dotfile.com/ | 2026-09-29 | 2026-09-29 |

## Subprocessors (14)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | - France - eu-west-3 (main) - Frankfurt - eu-central-1 (backups) - Ireland - eu-west-1 (other services); Cloud provider | Europe | 2026-09-29 |
| [Checkout](https://thirdpartyindex.com/vendors/checkout-com.md) | Identity verification | Europe | 2026-09-29 |
| Comply Advantage | AML screening | Europe | 2026-09-29 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Cloud monitoring; Infrastructure monitoring | Europe | 2026-09-29 |
| GBG | Identity verification | Europe | 2026-09-29 |
| IDnow | Identity verification | Europe | 2026-09-29 |
| [Knock](https://thirdpartyindex.com/vendors/knock-labs.md) | Notification; Notification center system | US | 2026-09-29 |
| [Metabase](https://thirdpartyindex.com/vendors/metabase.md) | Analytics Dashboard; Data analytics | Europe | 2026-09-29 |
| Onfido | Identity verification | Europe | 2026-09-29 |
| [Open AI](https://thirdpartyindex.com/vendors/openai.md) | AI LLM; For specific features, we are part of the Zero-Data-Retention program (ZDR) and we are only using the EU region. | Europe | 2026-09-29 |
| [Postmark](https://thirdpartyindex.com/vendors/postmark.md) | Engineering; Transactional email delivery | US | 2026-09-29 |
| RudderStack | Analytics; Data analytics processor | US | 2026-09-29 |
| [Veriff](https://thirdpartyindex.com/vendors/veriff.md) | Identity verification | Europe | 2026-09-29 |
| [Workato](https://thirdpartyindex.com/vendors/workato.md) | Workflow automation | Europe | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/16859)). CSV: https://thirdpartyindex.com/vendors/dotfile/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/16858))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/16858))

## Listed as a subprocessor by (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Flywire](https://thirdpartyindex.com/vendors/flywire.md): Automated business verification (KYB) and anti-money laundering screening

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api