Platform assurance and physical security
Managed infrastructure providers publish their own assurance reports and physical security information. Supabase’s security documentation identifies its hosted AWS infrastructure; Vercel and Cloudflare provide application and edge services. The provider table links to the relevant evidence.
Review the system boundary and region for the service you use. A provider’s SOC 2 report or ISO 27001 certificate does not certify DeepSearch’s application, configuration, or all downstream providers.
Managed infrastructure
DeepSearch uses managed services for application delivery, databases, authentication, and storage. Vercel, Supabase, and Cloudflare are part of this infrastructure. The subprocessor directory links to their security and privacy information.
Regional processing
A global edge network is different from a database storage region. The regions involved can vary by service and configuration. Our Privacy Policy describes international processing; contact the team for the configuration relevant to a procurement review.
Shared responsibilities
Infrastructure providers manage their platforms. DeepSearch remains responsible for application permissions, the information sent to a provider, service configuration, and the customer features built on top.