Your questions, answered.

In Zurich, Switzerland, on Supabase infrastructure (AWS, Zurich region). Switzerland benefits from an EU adequacy decision. Data is encrypted in transit and at rest. See the Trust Centre.

Yes. We have Data Processing Agreements with our processors and use Standard Contractual Clauses for any processing outside the EU and Switzerland.

Yes, on request: a security overview, our Data Processing Agreement and the hosting providers' audit reports. Contact us for the trust pack.

Yes. We support data access and deletion requests.

When the destination country has no EU adequacy decision and the recipient is not covered by the Data Privacy Framework. In that case the platform never presumes the transfer is safe: it requires an assessment.

Yes. Confirm, correct or reject: the human decision sits above the machine's verdict.

Yes, it is a separate module. Choose it alone, or together with TPRM Risk Assessment in the Full and Enterprise plans.

It depends on the number of third parties you assess each year, the modules you choose (TPRM Risk Assessment, GDPR Transfer Adequacy, or both) and the number of administrators and members. Pricing is on request: tell us your numbers.

Choose TPRM Risk Assessment to screen, assess and monitor your third parties (AML, sanctions, media), GDPR Transfer Adequacy to handle transfers of personal data outside the EU, or both with the Full and Enterprise plans.