Skip to content
Delsivo
Trust

Subprocessors

Last updated 6 November 2026

The providers that will process data for Delsivo, what each does, the data it handles and where.

A subprocessor is a company that processes personal data on Delsivo's behalf so we can provide the service. Each fund that uses Delsivo is the controller of the data founders send it, and Delsivo processes that data for the fund (see the data processing agreement). The providers below would process it only for the purposes listed and under contract with us.

Delsivo is at the design partner stage, so this list is planned: no provider processes fund or founder data for us yet. Regions marked “set at launch” are chosen with design partners, and we will update this page before any fund's data is processed.

  1. 01Planned subprocessors

    • Vercel
      What for:
      Hosting for the website, the app and fund portals
      Data:
      Requests (IP address, browser), app logs, and the data the app handles while it runs
      Where:
      Global network; app region set at launch
    • Neon (PostgreSQL) or a managed MySQL provider
      What for:
      Database for fund data and, separately, the logs
      Data:
      Fund, deal, founder and evidence records; audit, security and AI call logs
      Where:
      Set at launch with design partners
    • Amazon Web Services
      What for:
      Private file storage, malware scanning, deck extraction, video processing, email
      Data:
      Decks, interview recordings, transcripts, room documents; email addresses and email content
      Where:
      Same region as the database
    • Anthropic (Claude)
      What for:
      Deck analysis, thesis screening, interview assessment and drafting
      Data:
      Deck text and images, transcripts and evidence needed for the task, with contact details removed where possible
      Where:
      United States
    • OpenAI
      What for:
      Interview transcription and the interviewer's voice (only for: funds that turn on live interviews)
      Data:
      Interview audio
      Where:
      United States
    • Real-time media provider (LiveKit planned, to be confirmed)
      What for:
      Carries live interview camera, microphone and screen streams over WebRTC and records them to Delsivo's storage (only for: funds that turn on live interviews)
      Data:
      Interview audio, video and screen streams while the call runs
      Where:
      Set at launch with design partners
    • Tavily
      What for:
      Web research for idea validation and research briefs (only for: funds that turn on research)
      Data:
      Search queries about the company and market, never private documents
      Where:
      United States
    • Cloudflare
      What for:
      DNS and Turnstile bot checks on public forms
      Data:
      Browser signals during form checks
      Where:
      Cloudflare's global network
    • Stripe
      What for:
      Card payments in US dollars (only for: funds paying in US dollars)
      Data:
      Billing contact, invoices and payment status. Card details stay with Stripe
      Where:
      United States and other countries
    • Razorpay
      What for:
      Payments in rupees (only for: funds paying in rupees)
      Data:
      Billing contact, invoices and payment status. Card and UPI details stay with Razorpay
      Where:
      India
    • cron-job.org
      What for:
      Runs scheduled jobs and uptime checks
      Data:
      No personal data: it calls Delsivo's job addresses on a schedule
      Where:
      Germany

    Providers marked “only for” process data only when a fund turns that feature on or pays that way. The transcription, malware scanning and web research providers are still being chosen; a provider is added here before it is switched on, never after.

  2. 02What stays with Delsivo

    • AI providers receive only the content needed for the task the person asked for, filtered by that person's permissions, with founder phone numbers and email addresses removed where the task doesn't need them. Another deal's or another fund's data is never sent.
    • AI providers are used under terms that don't train on submitted content. We confirm those terms, and any zero-retention option, for each provider before a fund's content is processed.
    • The web research provider receives search terms about the company and its market, never private documents, room files or founder contact details.
    • Logs never contain deck or transcript text, full founder contact details, passwords, sign-in codes or tokens.
    • Card and UPI details stay with Stripe and Razorpay. Delsivo receives only the card brand and last 4 digits.
    • Delsivo doesn't sell personal data or share it for advertising.

  3. 03How changes are announced

    Before a new subprocessor starts processing fund or founder personal data, we add it to this page, change the date at the top, and email the Admins of every fund using Delsivo. A fund that objects can tell us at hello@delsivo.com, and we will work with it on a solution, as set out in the data processing agreement.

    Removing a provider, or a change that doesn't affect personal data, is updated here without an email.

  4. 04Where data is hosted

    At launch Delsivo runs in one hosting region, chosen with design partners, with files stored in the same region as the database. AI providers such as Anthropic and OpenAI process content in the United States, under EU standard contractual clauses and the UK Addendum where the GDPR or UK GDPR applies. Data residency options are planned for a later enterprise release. Read more on the GDPR page and the security page.