Trust Center
Security, privacy, and compliance. Understand how we protect your information and the services we build on.
Updated
Security, privacy, and accountability.
Understand the controls behind the service and the documentation available to your team.
At a glance
- Infrastructure
- Vercel · Supabase · Cloudflare
- Data protection
- Encrypted transport, private storage, and controlled access
- Access
- Authentication, role and ownership checks
- Payments
- Provider managed; no full card numbers stored
- Information
- Public source results, account information, and content submitted for the features you use
Compliance
Explore the privacy frameworks, security assurance, and payment standards relevant to DeepSearch. Each page explains its scope and the documentation you can request.
Privacy rights, service controls, and provider assurance each have a defined scope. Contact us for the documents relevant to your review.
Security controls
Explore the areas that protect the service, from access and payment handling to privacy requests and incident response.
Data security
- Encrypted transport
- Private storage and signed links
- Protection for sensitive stored data
Infrastructure
- Vercel application hosting
- Supabase database and authentication
- Cloudflare edge services
Network security
- HTTPS for public services
- Request validation and rate limits
- Restricted outbound fetches
Monitoring and logging
- Error and availability monitoring
- Operational event records
- Limited access to logs
Incident response
- Dedicated security topic
- Triage, containment, and recovery
- Applicable notification duties
People and awareness
- Access according to responsibility
- Confidential handling
- Escalation of security concerns
Data privacy and your rights
- Access and correction requests
- Search result removal
- Account deletion and cookie choices
Subprocessors and infrastructure
The principal services involved in operating DeepSearch. Follow each provider for its own security and privacy information.
| Provider | Purpose | Information involved | Region and scope | Provider assurance |
|---|---|---|---|---|
| Vercel | Application hosting and delivery | Web requests and operational data | Global delivery; service dependent | SOC 2 and ISO 27001 resources in provider Trust Center |
| Supabase | Database, authentication, and storage | Account records and stored product data | Configured project region | SOC 2 Type 2; ISO 27001; HIPAA offering requires a BAA and approved scope |
| Cloudflare | Edge services and network infrastructure | Network requests and service data | Global network; service dependent | SOC 2 Type II; ISO 27001 provider resources |
| Stripe | Payments, subscriptions, and billing | Payment and transaction information | According to payment service terms | PCI Service Provider Level 1; provider SOC reports |
| PayPal | Supported payment transactions | Payment and transaction information | According to payment service terms | Provider privacy and payment security terms |
| PostHog | Product analytics and diagnostics | Product events and technical context | Configured analytics region | Provider SOC 2 and privacy documentation |
| OpenAI | AI processing for supported models | Relevant prompts, context, and attachments | According to model and service configuration | Provider enterprise privacy and security resources |
| Anthropic | AI processing for supported models | Relevant prompts, context, and attachments | According to model and service configuration | Provider assurance documentation in Trust Center |