Subprocessors
The vendors we use to run Dock: what each one sees, how long it keeps it, where it runs, and the data processing agreement it operates under. Every fact below comes from the vendor’s own published documentation; where a vendor doesn’t publish a fact, we say “not published” rather than guess.
Last updated: October 18, 2026
Vercel
Application hosting, edge routing, static + serverless compute, image optimisation, Blob storage for support attachments.
- Data seen
- Runtime logs (request path, user agent, region, console output); Support-ticket attachments (Blob)
- Retention
- Runtime logs from 1 hour up to 30 days depending on plan; Blob objects kept until deleted; CDN cache up to 1 month.
- Region
- USA (Blob stored in iad1; global edge; backups globally replicated)
Neon
Managed Postgres: the primary system of record for account, workspace, agent, and event data.
- Data seen
- Account; Workspace content; Agent and activity events
- Retention
- Live data until deleted; point-in-time restore history 1 day by default (up to 30 days by plan); deleted projects recoverable for 7 days.
- Region
- USA (AWS us-east-1)
Cloudflare
Workers + Durable Objects power the real-time event transport that fans out row and doc updates to connected clients.
- Data seen
- Event payloads in transit and Durable Object storage; End-user IPs in logs
- Retention
- Workers logs up to 7 days; Durable Object storage until deleted, with 30-day point-in-time recovery.
- Region
- Global (Cloudflare edge)
Stripe
Billing, subscription management, payment processing. We never see card numbers; Stripe handles them end-to-end.
- Data seen
- Name; Email; Billing address; Payment card / bank details (held by Stripe); IP; Customer and order IDs; Tax ID if collected
- Retention
- No fixed periods published: kept while services are provided, then as required for legal, fraud, tax, and accounting obligations.
- Region
- USA (transfers include the US and India)
Resend
Transactional email: sign-in codes, service notifications, support-ticket replies.
- Data seen
- Recipient email addresses; Email content and metadata; Delivery events and logs
- Retention
- Email data 30 days; backups 7 days; remaining data deleted within 90 days of account termination.
- Region
- USA (storage; sending region affects routing only)
Inkbox
Agent email and messaging. Provides the email addresses (@dockmail.ai) and phone numbers agents send and receive email and iMessages on.
- Data seen
- Email and message content and metadata; Sender and recipient addresses and phone numbers
- Retention
- Not published during the term; on request within 30 days of termination, data destroyed or returned except backups.
- Region
- USA (may process in other countries where Inkbox or its subprocessors operate)
Twilio
Phone verification. Twilio Verify texts the code that proves you hold the phone number you give at sign-up; Twilio generates and checks the code, and we never see it.
- Data seen
- Phone number; Verification status
- Retention
- Verify retention not published; stored content deleted 30 days after the end of service, and from backups after 60 days.
- Region
- USA (primary processing facilities)
GitHub
Mirror repository for support tickets. Filing a support ticket creates an issue in a private repo so our team can triage.
- Data seen
- Support ticket content (issues, comments, attachments); Reporter and agent identifiers
- Retention
- Kept until deleted; a deleted repository can be restored within 90 days; backup purge timeline not published.
- Region
- USA, or wherever GitHub and its subprocessors operate (DPF / SCCs)
Sentry
Error and performance monitoring. Captures stack traces and request context on failures so we can diagnose regressions without asking you to reproduce.
- Data seen
- Stack traces; Request data; User context and IP; Breadcrumbs
- Retention
- Error and performance events 30 to 90 days depending on plan.
- Region
- USA (Iowa); Sentry also offers an EU region, fixed at org creation
Anthropic
AI model provider. When agents connected via Claude call Dock, inference happens on Anthropic infrastructure. Agents running on your own Claude subscription operate under your Claude terms rather than Dock's API terms.
- Data seen
- Prompts (agent conversations, tool outputs); Model outputs; Account and usage metadata
- Retention
- API inputs and outputs deleted within 30 days unless otherwise agreed; content flagged under Anthropic's Usage Policy up to 2 years; trust and safety scores up to 7 years.
- Region
- USA (storage); inference may run globally by default
OpenRouter
Model routing. Dock issues an OpenRouter key to each user whose plan includes non-Anthropic models, and requests from agents using those models (such as OpenAI, Moonshot AI, and Z.AI models) pass through OpenRouter to the provider serving that model.
- Data seen
- Prompts (agent conversations, tool outputs); Model outputs; Request metadata (token counts, latency); Pseudonymous Dock user id as the key label
- Retention
- Prompts and outputs deleted promptly after the response unless prompt logging is opted into; request metadata kept as long as necessary for the purpose (no fixed period published); data deleted from datastores and backups within 30 business days of a deletion request.
- Region
- USA (Google Cloud US regions); each request is forwarded to the provider serving the model, whose location varies
OpenAI
AI model provider for built-in features: turns workspace content into embeddings for search, and transcribes video soundtracks.
- Data seen
- Workspace content (doc bodies, table rows, HTML surfaces) sent for search indexing; Search queries; Video audio and transcripts
- Retention
- Not used for training by default. Embedding requests kept up to 30 days for abuse monitoring; transcription requests not retained.
- Region
- Not published (no default storage region stated)
Google (Gemini API)
AI model provider for image generation. When an agent uses Dock's image tool, its prompt is sent to Google's Gemini API and the resulting image is stored in Dock.
- Data seen
- Image prompts; Generated images
- Retention
- Paid-service prompts and responses not used to improve Google products; logged for a limited period for abuse detection (length not published).
- Region
- Not published (may be stored transiently or cached in any country where Google operates)
Deepgram
Speech-to-text for voice input in agent chat. Your microphone audio streams from the browser directly to Deepgram, and the transcript lands in the composer. Every request opts out of Deepgram's Model Improvement Program.
- Data seen
- Microphone audio; Transcripts; Request metadata and usage logs
- Retention
- With the Model Improvement Program opt-out Dock sets, audio and transcripts kept only for the duration of the request; metadata and usage logs retrievable for 90 days, summarized usage kept longer.
- Region
- Not published (Deepgram's global endpoint)
Monid
Data gateway for agent tools. When an agent looks up data with Dock's built-in data tools (for example people, company or search data), Dock sends the request server-to-server to Monid, which passes it to the data provider that serves it and returns the result.
- Data seen
- Tool requests (search terms and inputs the agent supplies); Tool results; Request metadata (price, status)
- Retention
- Not published
- Region
- Not published
Composio
Brokers the OAuth connections to third-party apps you link to Dock (including Google), performs the token exchange, stores and refreshes those apps' OAuth tokens, and hosts the tools your agents use to call those apps. For Google accounts, see section 18 of the Privacy Policy.
- Data seen
- OAuth tokens and credentials for connected apps; Tool-call inputs and outputs; Trigger events; Staged files; Audit logs
- Retention
- Execution and trigger logs up to 1 year; staged files 24 hours; OAuth token and audit-log retention not published.
- Region
- Not published (privacy policy lists the USA)
Fly.io
Runs the machines and volumes that cloud agents work on. A cloud agent's conversations, tool activity, and working files are processed and stored on its machine while it runs for you.
- Data seen
- Agent workspace files and browser profiles; Machine memory; Volume snapshots; Platform logs
- Retention
- Volume data until the volume is destroyed; volume snapshots 5 days by default (configurable 1 to 60); log search 7 days; account data removed within 30 days of account deletion.
- Region
- USA (iad: Ashburn, Virginia) by default
Upstash
Serverless Redis backing the API rate limiter. Stores short-lived rate-limit counters to enforce per-actor request limits and prevent abuse. No workspace content passes through it.
- Data seen
- Rate-limit counters keyed by IP / user identifiers
- Retention
- Rate-limit keys expire on short TTLs; backup copies of a terminated database kept up to 4 weeks; audit logs 7 days to 1 year by plan.
- Region
- USA (AWS us-east-1)
PostHog
Product analytics. Captures pageviews and interaction events to understand feature usage, routed through a first-party proxy. Session recording is disabled.
- Data seen
- Product events; Person properties (pseudonymous user id, org id, role); IP / geo
- Retention
- Events 1 year on the free tier, 7 years on paid plans; session recordings, where a plan enables them, 30 days to 1 year (ours are disabled).
- Region
- USA (AWS us-east-1)
International transfers
Most of our subprocessors store data in the US; each row’s region says where, or that the vendor doesn’t publish it. Cloudflare operates globally at the edge, Anthropic inference may run globally by default, and OpenRouter forwards each request to the provider serving the model, wherever that provider runs. For EU/UK customers, transfers from the EEA/UK to the US are covered by the Standard Contractual Clauses in each vendor’s DPA (linked above) where the DPA includes them; Inkbox’s DPA names no transfer mechanism, and Deepgram does not publish a DPA. We process your data under those clauses by accepting each vendor’s terms.
Notice of change
We’ll update this page before (or at the same time as) adding a new subprocessor, and notify account holders by email where the change materially affects them. To object, email privacy@trydock.ai within 30 days of notice. We’ll work through alternatives or, failing that, refund the remaining prepaid balance.
See also: Privacy Policy · Terms · Security.