Donut is an employee experience platform that helps you automate and scale people programs, right in Slack
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Donut discloses on its trust center. Linked entries have their own profile in the Trust Index.
54% chain trust: 20 of 37 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Cloud hosting, servers, and databases
- Google Workspace Email, docs, and analytics
- Heroku App hosting and database
- Slack Internal messaging
- Cloudflare DNS management
- CircleCI Code delivery/deployment pipeline
- Datadog Metrics gathering and monitoring
- GitHub Code management and version control
- Fullstory Web app usage and support
- Hevo Data Inc. Syncing data from production data stores to data warehouse
- Hubspot Customer relationship management and marketing
- Intercom Support via live chat and email, key customer updates
- MailChimp Newsletter for users who opt in
- Mailgun Service emails
- Merge *Optional* subprocessor for customers that choose to integrate their Human Resources Information System (HRIS) with Donut
- Mixpanel Aggregate usage tracking
- OpenAI Generate content to be used in Donut products
- SolarWinds Log aggregation
- Profitwell Financial analysis
- Sentry Application Monitoring
- Rillet Accounting
- Sisense (formerly Periscope Data) Aggregate usage analysis
- Stripe Payment collection and handling
- Zoom User research, customer support, sales
- Linear Tracking customer feedback and roadmap planning
- Anthropic Content generation
- Canva Content design and creation
- Langfuse Monitoring LLM performance
- Notion Documentation and note-taking
- Tremendous Gift card fulfillment
- Vercel Hosting and delivering front-end applications.
- Convex Handles our back-end data operations and ensuring secure data processing and storage for some Donut applications.
- Resend Sends transactional emails and monitoring email performance for some Donut applications.
- Railway Used for hosting front end and back end web application and their related assets and internal services.
- Recall.ai *Optional* Meeting recording and transcript generation for Indigo customers.
- Storylane Sales and marketing demos
- Viktor Internal productivity
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
