PlatformPlatform overviewAudit readinessEvidence roomPolicy managementRisk registerVendor riskSecurity questionnairesPeople & trainingIncidents & continuityReports & exportsSolutionsClear security reviewsPass your first auditManage third-party riskStay continuously readyFrameworksSOC 2HIPAAISO 27001NIST CSFPCI DSSResourcesAll resourcesBlogSOC 2 guideHIPAA Security Rule guideISO 27001 guideSecurity questionnaires guideSOC 2 readiness checklistFAQCompanyPricingAbout usServicesSecurityTrust CenterPartnersCareersNewsroomContactSign inRequest a demo

Home / Trust Center

Trust Center

Our own security, in the open.

We ask our customers to show their work. This page shows ours: how the platform is protected, where we are on our own compliance journey, and who processes data on our behalf.

Status

Where we stand

Platform security controls

MFA, separated workspaces, role-based access, audit trail, HTTPS. Details

In place

Doniastack’s own SOC 2

We will publish our progress here as our own programme moves forward.

Planned

Security questionnaire about Doniastack

We complete your vendor questionnaire on request.

Request

Subprocessors

Who processes data for us

Third parties that process data on Doniastack’s behalf. We update this list when it changes.

CompanyPurposeLocation
Amazon Web Services (AWS)Hosting of the Doniastack platform, database and file storageUnited States
ResendSending email from the platform (notifications, invitations, password resets)United States
StripeBilling and payment processingUnited States
GoDaddyHosting of this public website (not the platform)United States
Google FontsTypefaces on this public websiteUnited States

Last updated November 9, 2026

Found a security issue?

Please tell us privately at hello@doniastack.com with the subject "Security report". We will acknowledge it and keep you updated while we fix it. Please don’t test against other customers’ data.

Get started

See where you stand in 30 minutes

Tell us which review or audit is in front of you. We'll walk you through the platform and map what readiness takes, with no obligation.