Sub-processors
Last updated: November 2026
We use the following service providers. Transfers outside the EEA are based on the EU-U.S. Data Privacy Framework where the provider is certified, otherwise on the EU Standard Contractual Clauses (Art. 46 GDPR).
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Netlify, Inc. | Website hosting, server functions, encrypted storage of list snapshots and job results | Connection data, request contents in memory | USA / global CDN |
| Supabase, Inc. | Accounts, sign-in, database (usage counters, profiles, contact messages, statistics) | Account and profile data | EU (Frankfurt) |
| Email delivery provider configured in Supabase (SMTP) | Confirmation and sign-in emails | Email address | As configured |
| Stripe Payments Europe, Ltd. | Payments and subscriptions | Billing data (we never see card numbers) | Ireland / USA |
| Cloudflare, Inc. (only if enabled) | Bot protection on sign-up (Turnstile) | Browser signals | Global |
| Brave Software, Inc. | Web and news search for deep investigations | The searched name and search terms | USA |
| Anthropic, PBC (only if enabled) | AI research agent in deep investigations: web search and fact extraction (roles, risk issues, business relationships) from public sources | Searched name, names of connected companies and people found in public sources, text of public web pages | USA |
| Free Law Project (CourtListener) | Court-record search | The searched name | USA |
Screening in your browser also queries Wikidata, Wikipedia, ICIJ and Interpol directly from your device. We inform business customers about changes to this list in advance.