Legal
Subprocessors
Version 2026-10-25 · Last updated October 25, 2026
Contents
Deal Studio uses the following providers to run the Platform. Each one processes Customer Personal Data only to provide its service to us, under written terms. We will notify Brokerage Admins at least 30 days before adding or replacing a provider on this list. To receive these notices by email, write to privacy@deal-studio.com.
Core platform
| Provider | What it does for us | Data it handles | Where | Security and data protection |
|---|---|---|---|---|
| Supabase, Inc. | Database, sign-in, and file storage for every part of the Platform | All Customer Data | United States (Broker Ops, MarketOps, internal system). Canada (DealBuilder and the Buyer and Seller Portal) | Security, DPA |
| Vercel Inc. | Application hosting, scheduled jobs, and file storage for the CIM engine | Customer Data in transit and in function logs. CIM working files | United States | Security, DPA |
| Netlify, Inc. | Hosts the public website and its forms | Site visitor and form data | United States | Security, DPA |
Mail, calendar, and meetings
| Provider | What it does for us | Data it handles | Where | Security and data protection |
|---|---|---|---|---|
| Nylas, Inc. | Connects Users' mailboxes and calendars (Google, Microsoft, iCloud, Yahoo, IMAP) and Zoom accounts | Email, calendar, and contact data of connected accounts. Meeting links | United States. Nylas states some account administration data is kept in the EU | Security, Privacy, Subprocessors |
| Zoom Communications, Inc. | Meeting links. Cloud recordings, transcripts, and meeting summaries for meetings our team hosts | Meeting details, recordings, transcripts | United States | Privacy, Legal and compliance |
| Google LLC | Sign in with Google. Direct mailbox features in our internal system for our own team | Account identifiers. Team mail | United States | Data processing terms |
| Microsoft Corporation | Sign in with Microsoft | Account identifiers | United States | Products and Services DPA |
AI and transcription
| Provider | What it does for us | Data it handles | Where | Security and data protection |
|---|---|---|---|---|
| Anthropic, PBC | AI Features: drafting, summaries, mail sorting, criteria help, CIM and marketing content | The content a feature needs for the task | United States | Commercial Terms, DPA, Trust center |
| AssemblyAI, Inc. | Turns recordings and dictation into text. Its copy is deleted once the transcript is saved | Audio and transcripts | United States | Security, DPA |
| Google LLC (Gemini API) | Image generation inside the CIM engine | Prompts and listing images chosen for a CIM | United States | Gemini API terms |
| Our CIM and creative engine provider | Runs the CIM engine and the creative engine that draft and lay out CIMs and marketing designs | Listing details, financial documents, and images chosen for a job. The creative engine keeps nothing after a job | United States | Hosted on Vercel (above) |
Messaging, support, and email
| Provider | What it does for us | Data it handles | Where | Security and data protection |
|---|---|---|---|---|
| Our CRM and marketing automation provider | Firm contacts, texting and calling lines, automations, booking calendars, marketing email, social posting, document signing | Contacts written to the firm CRM, text and call content and records, campaign content, signed documents | United States | Named in each Brokerage's copy of the DPA |
| Telecommunications carriers used by our CRM provider | Deliver texts and calls | Phone numbers, message content | United States | Through our CRM provider |
| Resend, Inc. | Sends sign-in links, notifications, and support email | Email addresses, message content | United States | Security, DPA |
| Teamwork.com Ltd. | Support desk, being retired by December 31, 2026 | Support requests | United States and European Union | Security, DPA |
| Cloudflare, Inc. | DNS for our domains, and delivery of our deal-studio.com website | Website visitor traffic in transit | Global | DPA |
Services a Brokerage chooses to connect
These are the Brokerage's own providers, not ours. They appear here so you know where information goes when you connect them: your own email provider (Google, Microsoft, Apple iCloud, Yahoo, or another), your own Zoom account, and your own social media accounts.