Trust
Sub-processors
Every third party that processes customer data on our behalf, what it is used for, and what it can actually see. Published rather than held back until procurement asks.
Last updated 21 August 2026
| Processor | Purpose | Location | What it can see |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Frankfurt, Germany (eu-central-1) | All workspace data: deals, contacts, activity, uploaded documents |
| Vercel | Application hosting and server functions | Frankfurt, Germany (fra1) | Data in transit while a page or API call is being served |
| Anthropic | AI drafting and summarising, where you ask for it | United States | Only the text of the specific draft or summary you request. Not used to train models. |
| xAI | Working out a firm's email format, where you ask for it | United States | Only the firm name and the example addresses you supply for that one lookup. No deal data, no contact list. Not used to train models. |
| Resend | Our own transactional email: team invites and access decisions | Ireland (EU) | The recipient's name and email address and the text of that one message. Never your outreach, which does not pass through us at all. |
| Stripe | Payment processing, if and when you subscribe | United States and Ireland | Billing details only. No deal data. |
There is no mail sub-processor
Your outreach has no mail sub-processor. It is sent directly from your own mailbox - through Microsoft Graph, the Gmail API, or your firm's own SMTP server - using credentials encrypted with AES-256-GCM and never returned to the browser. Nothing you send to a counterparty is relayed through DealLaunch infrastructure, which means your firm's existing journaling and archiving still capture every message. Our own transactional email - a team invite, or telling somebody their access was approved - is sent through Resend and is listed above; it never carries deal data.
Changes to this list
We will give customers at least 30 days' notice by email before adding a sub-processor that can access workspace data, and this page will be updated on the same day. If you object to a new sub-processor you may terminate without penalty and export your data. To be notified, write to hello@deallaunch.ai.