Security & privacy
Your sales data is your capital. Here is how we protect it.
Hosted in the EU
The Set2Sell Cockpit database runs on Supabase in Frankfurt, Germany (AWS eu-central-1). The application is delivered via Vercel.
Encryption
All connections are TLS-encrypted; stored data is encrypted at the infrastructure level (encryption at rest).
Access control
Every workspace is strictly separated: access only for invited members, with roles and permissions. Sign-in runs through the specialized auth provider Clerk.
GDPR
Processing on your behalf under Art. 28 GDPR with standard contractual clauses for third-country transfers. Export and deletion functions are built directly into the software.
Subprocessors
We use the following providers to operate the service. This list is also the annex to the data processing agreement and is updated when it changes.
| Provider | Purpose | Location / region |
|---|---|---|
| Supabase | Database & file storage | EU (Frankfurt, eu-central-1) |
| Vercel | Hosting & application delivery | USA / global edge network |
| Clerk | Authentication & sign-in | USA |
| Stripe | Payment processing | USA / EU |
| Twilio | Telephony & SMS | USA |
| SendGrid (Twilio) | Email delivery | USA |
| Anthropic | AI features (e.g. summaries and drafts) | USA |
| OpenAI | AI features (e.g. transcription) | USA |
| Apify | Lead research | EU (Czech Republic) |
Data processing agreement (DPA)
Our DPA under Art. 28 GDPR is part of the service agreement and available online at any time. The contract document is provided in German.
Read the DPA (German)