OrderToDock sub-processors
Effective 8 November 2026.
OTD Technologies Pte. Ltd. uses these providers to run the Service. "Where" says where data is processed, as far as we can state it. We give customers at least 30 days' notice by email before adding or replacing a sub-processor, as section 10.3 of the Data Processing Agreement says.
| Sub-processor | What it does | Data it receives | Where |
|---|---|---|---|
| DigitalOcean, LLC | Hosting: the application, the database, job queues, file storage and backups. | All Customer Data. | Singapore. A backup copy of stored files is kept in Frankfurt, Germany, once it is in place (section 6.11 of the Data Processing Agreement). DigitalOcean is a United States company. |
| Cloudflare, Inc. | The content delivery network in front of DigitalOcean's application hosting. We do not contract with it directly for the Service. | Everything passing between a browser and the Service, in transit. | Cloudflare's global network, normally a location near the person connecting. |
| Postmark | Sending all outbound email, receiving all inbound email at OrderToDock addresses, and reporting bounces and complaints. | Outbound: addresses, subject and full body, including links. Inbound: the complete message, including headers, body and attachments. Postmark keeps message content for a period set in our account, 45 days by its default. | We treat Postmark's processing as taking place in the United States. |
| Anthropic, PBC | The AI Features: sorting inbound messages, reading Suppliers' replies, reading the structure of uploaded spreadsheets, and translating the model's explanation on request. | Sorting: the sender's address, the subject and up to 4,000 characters of the message. Reading a reply: the order's lines (line number, description, quantity, unit, requested date and what the Supplier has already confirmed), the subject and up to 8,000 characters of the reply, which can include earlier messages in the thread. Spreadsheet structure: sheet names, whether hidden, row counts, the header row and up to 20 sample rows with cells cut to 200 characters. Translation: the model's earlier explanation, which can quote the Supplier's words. Never attachments. | Anthropic is a United States company, and we treat its processing as taking place in the United States. |
| Sentry (Functional Software, Inc.) | Error monitoring for the application and background worker. | Error reports: exception type, message and stack trace, and the context of the failing request, cleaned as section 6.10 of the Data Processing Agreement describes. | The United States or the European Union, according to the data region of our Sentry account. |
| Google LLC (Places API) | Suggesting and completing postal addresses when an Authorised User types a supplier address. | The text typed into the address field, a country code if chosen, and the identifier of a chosen suggestion. Calls come from our server, so the user's browser and IP address are not sent. | Google's global infrastructure. |
| Google LLC (Google Workspace) | Our own email, including support@, privacy@ and [email protected]. | What people write to those addresses, and our answers. | Google's global infrastructure. |
| Meta Platforms (WhatsApp Cloud API) | Only where the WhatsApp channel is enabled: sending order notices to Supplier Contacts and receiving their messages. | Outbound: the Supplier Contact's WhatsApp number, the template and its values. Inbound: the sender's WhatsApp number, message text, identifiers, timestamps and the business number. Voice notes, photos and other media are not downloaded. | Meta's infrastructure, which can be outside Singapore. |
| Paddle (Paddle.com), Merchant of Record, not acting on our behalf | Selling the subscription: checkout, payment, tax, receipts, refunds and the billing portal. Paddle handles this as an organisation in its own right, under its own terms and notice. | The buyer's name, email address, payment and tax details, which the buyer gives directly to Paddle. From us, an identifier for the Workspace and the chosen plan. Never messages, orders or Supplier data. | Paddle's infrastructure, which can be outside Singapore. |
What is not on this list, and why. Files are scanned for malware by software we run ourselves on our own hosting, so they do not leave our infrastructure for scanning. Sign-in is handled by a library running inside the Service, with no external authentication provider. If you ask us to connect a system of your choice to your Workspace, that system is your recipient rather than our sub-processor: it is told which order changed, what kind of change and when.
Our website. The public website at ordertodock.com does not handle Customer Data, and its providers are described in the Privacy Notice: DigitalOcean (hosting), Cloudflare (delivery and Cloudflare Web Analytics), Web3Forms (the contact form) and Google (Google Fonts, and Google Calendar for booking a demo).