Trust
Sub-processors
Every third party that processes customer data on our behalf, what it is used for, and what it can actually see. Published rather than held back until procurement asks.
Last updated 27 July 2026
| Processor | Purpose | Location | What it can see |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Frankfurt, Germany (eu-central-1) | All workspace data: deals, contacts, activity, uploaded documents |
| Vercel | Application hosting and server functions | Frankfurt, Germany (fra1) | Data in transit while a page or API call is being served |
| Anthropic | AI drafting and summarising, where you ask for it | United States | Only the text of the specific draft or summary you request. Not used to train models. |
| OpenAI | AI research assistance for target ideas, where you ask for it | United States | Only the brief you submit for that request. Not used to train models. |
| Stripe | Payment processing, if and when you subscribe | United States and Ireland | Billing details only. No deal data. |
There is no mail sub-processor
There is no mail sub-processor. Outreach is sent directly from your own mailbox - through Microsoft Graph, or through your firm's own SMTP server - using credentials encrypted with AES-256-GCM and never returned to the browser. Nothing you send is relayed through DealLaunch infrastructure, which means your firm's existing journaling and archiving still capture every message.
Changes to this list
We will give customers at least 30 days' notice by email before adding a sub-processor that can access workspace data, and this page will be updated on the same day. If you object to a new sub-processor you may terminate without penalty and export your data. To be notified, write to hello@deallaunch.ai.