Sub-processors
Last updated: 26 June 2026
To deliver the Deepfin platform we engage the third-party sub-processors listed below. Each is bound by appropriate data protection terms. We maintain this list separately from our Privacy Policy so that it always reflects our current vendors.
| Processor | Purpose | Data passed to them |
|---|---|---|
| Hetzner Online GmbH | Cloud hosting / infrastructure — runs the application servers, database, and document storage | All application data at rest: user accounts, deal records, uploaded documents, assessments, and any personal data contained within them (EU data residency, Germany) |
| Anthropic (Claude API) | LLM powering assessments, document analysis, report writing, adverse-media analysis, and action plans | Uploaded deal documents, questionnaire responses, and assessment content — including any personal data contained in those documents |
| Google (Gemini API) | LLM, in particular the PDF / document extraction pipeline | Document contents (including PDFs) and associated text |
| Tavily | Web search for adverse-media screening and source discovery | Search queries — company names and names of individuals screened for adverse media |
| Firecrawl | Web page fetching / scraping of discovered sources | URLs to crawl (receives the page content back; no personal data of our users is sent) |
| Postmark | Transactional email — user invitations, password resets, feedback notifications | User email addresses and names |
Note: Browserless and FlareSolverr are self-hosted on Hetzner, so they are not third-party processors — no external party receives data through them.
Questions about our sub-processors? Email klara@deepfin.so.