Service providers and subprocessors
Last updated October 2026.
Investoried uses a small number of providers to run the service. These are the ones that handle personal data, what they do for us, and where. How we handle your data is in the privacy notice.
| Provider | Purpose | Region |
|---|---|---|
| Vercel Inc. (USA) | Runs the website and the app, and stores the documents you upload. | Region: EU (Frankfurt) for the app and stored documents. Builds and some of Vercel’s logs in the USA.Pages and documents are delivered and cached through Vercel’s worldwide network. |
| Neon, part of Databricks, Inc. (USA) | The database: accounts, rounds, commitments, the waitlist. | Region: EU (Frankfurt)Backups are kept for 30 days. |
| Resend (Plus Five Five, Inc., USA) | Sends our email: sign-in links, invitations and notifications. | Region: Sent from the EU (Ireland). Message content and delivery logs are stored in the USA.Kept for 30 days. |
| Anthropic Ireland, Limited | The AI features: one-page summaries of pitch decks, the assistant, and reading documents you import. | Region: USA. Processing may also run in Europe, Asia or Australia.Deleted within 30 days, or kept for up to two years if flagged for breaking Anthropic’s usage policy. Not used to train its models. |
| Cloudflare, Inc. (USA) | Our domain name, and forwarding of email sent to @investoried.com addresses. | Region: Cloudflare’s worldwide network.Forwards messages without storing their content; routing records are kept for 31 days. |
| Google (Gmail) | The inbox that receives email sent to hello@investoried.com. | Region: Google’s servers around the world; Gmail offers no choice of region. |
Outside the EU: Anthropic relies on EU standard contractual clauses in its data processing agreement. Vercel, Neon, Resend and Cloudflare rely on EU standard contractual clauses and their certification under the EU–US Data Privacy Framework. Google handles Gmail under its own privacy policy, relying on the same two. Questions: hello@investoried.com.