DurioDraft: this page is being reviewed and may change before Durio takes on its first clients.
Sub-operators
The services that process personal information for Durio. Firms are told at least 30 days before one is added.
| Service | What it does | What it receives | Where |
|---|---|---|---|
| Railway | Hosting: the application and its database | All of a firm's data | Amsterdam, Netherlands (EU) |
| Railway (storage bucket) | Uploaded files | Files a firm uploads | Amsterdam, Netherlands (EU) |
| Resend | Sending email: sign-in links, invitations, invoices and notices | Recipients' names and email addresses, and the email's content | United States |
Services that receive no personal information
| Have I Been Pwned | Checks new passwords against known data breaches. It receives only the first 5 characters of a hash of the password, never the password. |
| GitHub | Holds Durio's source code and made-up test data only. |