Sub-processors
Last Updated: 9 October 2026
MeetDoris Ltd (trading as Doris Labs) engages a small set of sub-processors — third-party providers that process customer content on our behalf — to deliver the Doris services. This page is the current list. Where our customer agreements require it, we give customers advance notice of new sub-processors so they can object; to receive change notifications, email privacy [at] meetdoris [dot] com.
| Sub-processor | Purpose | Customer content processed | Primary processing location |
|---|---|---|---|
| Microsoft Azure Microsoft Corporation | Cloud hosting, compute, storage, databases, and the meeting-bot infrastructure Doris Labs operates to join Zoom, Microsoft Teams, and Google Meet meetings | Full platform data, including meeting audio and recordings | United Kingdom (Azure UK South, with backups in UK West). Messages between you and the Doris app in Microsoft Teams pass through Microsoft’s Azure Bot Service, which is not tied to one region. |
| Microsoft Azure OpenAI (EU Data Zone) Microsoft Corporation | AI inference, embeddings for search, and speech-to-text transcription, for every customer | Meeting content and other customer content submitted for inference or embedding; meeting audio submitted for transcription | European Union (Azure EU Data Zone). Inference and embeddings run in France Central and fail over to Germany West Central. Transcription runs in France Central, and may also use Azure AI Speech in North Europe (Ireland). Microsoft stores this data in the region of the resource and may process it in any EU member state within the EU Data Zone. |
| Auth0 Okta, Inc. | Authentication | User identifiers, email addresses, authentication events | United Kingdom |
| Sentry Functional Software, Inc. | Error tracking and performance monitoring | Diagnostic events, which may include user identifiers | European Union (Germany) |
| Datadog Datadog, Inc. | Application logs, traces and alerting | Application logs and traces, which may include user identifiers | European Union |
| Resend Plus Five Five, Inc. (Resend) | Delivery of emails the Services send | Recipient names and email addresses; email content | United States |
| Exa Exa Labs, Inc. | Web search and web page reading for the in-product assistant, account news, and the account watches users set up | Search queries, web addresses and watch descriptions, which may contain company or person names and other details from a user’s request | United States |
"Primary processing location" reflects configuration and typical operation. Some vendors may involve global support or onward processing; where that results in restricted international transfers, we rely on adequacy regulations or on standard contractual clauses with the UK Addendum, as provided in each provider's data processing terms.
Planned changes
WorkOS, Inc. will replace Auth0 for sign-in after 5 November 2026. It will process identity data only: users' names, work email addresses, organisation membership, sign-in events and IP addresses. It receives no meeting, email, CRM or document content. WorkOS processes data in the United States; the transfer relies on the EU standard contractual clauses with the UK Addendum in its data processing addendum. We will confirm the date by email at least 30 days before the change.
Recent changes
9 October 2026. Every customer’s AI inference and embeddings now run in Microsoft’s EU Data Zone, in France Central with failover to Germany West Central. Until this change, customers without UK/EEA-only processing used global Azure deployments with resources in UK South and East US 2, which Microsoft may process in any Azure region, including the United States. Transcription was already in the EU Data Zone. The open-weight models we ran on Azure AI Foundry (DeepSeek and gpt-oss) are no longer used. No Anthropic Claude model processes customer content; the earlier entry that named one was out of date.
8 October 2026. Tavily (web search) removed. Exa handles web search.
7 October 2026. Datadog, Resend, Exa and Tavily added to this list. Each was already in use and should have been listed. Auth0, Sentry and Microsoft Azure AI entries corrected to show where they process data.
September 2026. Attendee Inc. (meeting-bot infrastructure) and Deepgram Inc. (speech-to-text) stopped processing customer content. Doris Labs now runs its own meeting bots in Microsoft Azure, with transcription in Microsoft's EU Data Zone; the last meeting the hosted service handled was on 12 September 2026. We are arranging deletion of the historical data those providers hold. Help Scout, Inc. (support desk) is no longer used.
Independent providers (not sub-processors)
Some providers process personal data for their own purposes as independent controllers rather than on our behalf — for example, Stripe (payments), which handles payment data under its own privacy policy and legal obligations.
Integrations you connect (not sub-processors)
Calendar, email, CRM, and meeting platforms our customers choose to connect — such as Google Workspace, Microsoft 365, HubSpot, Zoom, Microsoft Teams, and Google Meet — are governed by the customer's own agreements with, and configuration of, those providers. They are not our sub-processors; we exchange data with them at the customer's direction.
Questions
For questions about our sub-processors or data practices, see our Privacy Policy or contact privacy [at] meetdoris [dot] com.