Sub-processor list
The providers that process personal data on behalf of Baloot MY Digital Agency to provide Dokira, what they receive and where. We tell admins by email at least 30 days before adding or replacing a sub-processor.
Version 2026-11-08 · Effective 08/11/2026 · Last updated 08/11/2026
This version is recorded when you accept it. Earlier versions are available from [email protected].
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hostinger (VPS) | Application server, database, queue, logs and virus scanning | Account, organisation and extracted document data and audit trail; filtered logs | Kuala Lumpur, Malaysia |
| Hostinger (email) | Support mailbox and sending system emails (verification, invitations, password reset, notifications) | Email addresses, names, email content | Hostinger's mail servers; location set by Hostinger and may be outside Malaysia |
| Cloudflare (application) | Document file storage and backups (R2), tunnel to the server (Tunnel), traffic protection, HEIC photo conversion (Workers and Images), DNS | Documents, encrypted backups, traffic including IP addresses | Cloudflare's global network; R2 storage with an Asia-Pacific location hint (not a guarantee that data stays in Malaysia) |
| Cloudflare (website) | Cookieless visit statistics and website forms (Workers and D1), anti-bot check (Turnstile) | Visit statistics without IP addresses, form data (name, email, message, answers), browser signals and IP address for Turnstile | Cloudflare's global network |
| Anthropic | AI that reads and classifies documents and suggests account codes (Claude models) | Page images and document text (bank account, MyKad and card numbers in text are hidden), supplier names, account names | United States |
| Stripe | Subscriptions, invoices, card and FPX payments, billing portal | Organisation name, billing email, organisation id; card or bank details are entered directly at Stripe | United States and other countries where Stripe operates |
| Apple (APNs) | Push notifications to iPhone and iPad | Push token, generic text (for example the number of documents waiting), notification kind and opaque ids; no supplier name, person's name or amount | United States |
| Google (Firebase Cloud Messaging) | Push notifications to Android | Push token, generic text key, counts, notification kind and opaque ids; no supplier name, person's name or amount | United States |
| Sentry | Server error reports, only when enabled (not active now) | Filtered error messages and random ids; no document content, emails or user data | European Union (Germany) |
| DeepSeek | Not used. Text of digital PDFs only if we switch it on for the service after 30 days' notice and an organisation's admin turns it on | No data is sent | China |
Not sub-processors
- App stores (Apple App Store, Google Play, Microsoft Store) are not sub-processors: they process your store account under their own privacy policies.
- LHDN (MyInvois) receives e-Invoice identifiers only on your organisation's instruction once e-Invoice checks are switched on; LHDN is not a sub-processor.
- GitHub, UptimeRobot and healthchecks.io receive no customer personal data.