List of subprocessors
Dodona relies on a small set of infrastructure and tooling partners. The list below explains what each partner does, which types of data they handle, where processing normally takes place, and any relevant geographic restrictions.
Microsoft Azure Hosting EEA (Sweden)
- Purpose
- Primary hosting for Dodona: compute, databases, object storage, and backups.
- Data handled
- Account data, submissions and results, and course enrollments.
- Notes
- All services are provisioned within the European Economic Area (EEA).
Cloudflare CDN / DDoS / WAF Nearby edge
- Purpose
- Content delivery, DDoS protection, and web application firewall.
- Data handled
- Network-level data (IP address, headers, request metadata). Limited request content may be processed for security.
- Notes
- Traffic is automatically routed to a nearby Cloudflare data center. European users are normally served from European edge locations. Where international transfers occur, Cloudflare's Data Processing Addendum provides transfer safeguards, including the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses where applicable.
Microsoft 365 Email & Support EEA tenant
- Purpose
- Sending/receiving support emails and operational messages.
- Data handled
- Contact details of correspondents, email content and attachments.
- Notes
- Our Microsoft 365 tenant is located within the EEA.
Sentry Error Monitoring EU region
- Purpose
- Error tracking and diagnostics.
- Data handled
- Redacted error events with minimized personal data.
- Notes
- We use Sentry’s EU data region.
Changelog
- Clarified the wording. No changes to the subprocessors.
- Initial version.