Exotictarget, Lda runs Sherlock Deal with a short list of suppliers. Each processes your data only on our instructions, cannot use it for its own purposes, and is bound by a data-protection agreement. We tell you before this list changes.
| Supplier | Purpose | What it processes | Where |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Everything the workspace stores | eu-west-2 (London, United Kingdom — adequacy decision) |
| Vercel | Hosting and execution of the application | Requests and responses in transit; server logs | Serverless functions in iad1 (United States) — standard contractual clauses |
| Stripe | Payments and subscriptions | Billing identity and payment status; card data never reaches us | United States / Ireland — standard contractual clauses |
| Anthropic | AI processing (extractions, summaries, drafts) | The text of documents and fields sent for a given feature, on your instruction | United States — standard contractual clauses |
| Resend | Transactional email delivery | Recipient address, subject and message body of emails we send you | United States — standard contractual clauses |
| VirusTotal | Malware check on uploaded files | A SHA-256 hash of the file only — never the file or its content | Hash lookup only; no personal data |
Questions about a supplier, or a data-rights request: data-rights request · How we hold professional contact information · Terms & Conditions (clause 8.3).