Dealsight AI Security
Subprocessor list
Third-party service providers that process customer data on our behalf to deliver the Dealsight platform. We require critical subprocessors to maintain appropriate security controls and, where applicable, signed data processing agreements. Material changes to this list will be reflected on this page.
See also: Security overview · Privacy Policy
Last updated: June 29, 2026
| Subprocessor | Purpose | Data shared | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting — compute, database, object storage, cache | All customer data at rest and in transit within the Dealsight platform | United States |
| Clerk | Authentication, organizations, and user identity | Email addresses, names, user and organization identifiers, session data | United States |
| Stripe | Subscription billing and payment processing | Organization billing contact, customer identifiers, subscription status (payment instruments stored by Stripe) | United States |
| Anthropic | AI analysis for diligence reports, Q&A, and document classification | Document text chunks and user questions submitted for analysis | United States |
| OpenAI | Text embeddings for semantic search and retrieval | Document chunk text and query text for embedding generation | United States |
| Pinecone | Vector database for document retrieval | Embeddings and metadata (document identifiers, project identifiers) | United States |
| LlamaCloud / LlamaParse | Fallback document parsing when local parsing is insufficient | Full uploaded file content (only when fallback parsing is used) | United States |
| Vercel | Frontend application hosting | Web traffic metadata, request headers, public environment configuration | United States |
| Sentry | Error monitoring and reliability diagnostics | Stack traces and technical diagnostics (PII minimized; session replay masked) | United States |
| PostHog | Product analytics (loaded only after cookie consent) | User and organization identifiers, page views, product usage metrics | United States |
| Resend | Transactional email (invites, report notifications) | Recipient email addresses, project names, notification links | United States |
Note: Restricted customer diligence content may be processed by AI and parsing subprocessors (Anthropic, OpenAI, Pinecone, and LlamaParse when fallback parsing is used) solely to deliver analysis, search, and reporting features. Customer content is not used to train Dealsight-owned models.
Questions about subprocessors or DPAs: info@dealsightai.net