Your customers' data is stored in the EU.
Plain facts, no badges we haven't earned. If your IT or purchasing team needs more, write to us.
Security and GDPR
Hosting
Customer data is stored in Frankfurt, Germany (EU). A few service providers – for email delivery, payments and technical support – may process limited data outside the EU under EU Standard Contractual Clauses or the EU–US Data Privacy Framework. See the list below.
Encryption
Data is encrypted in transit (TLS) and at rest.
Roles and access
Reps see their own customers. Managers see the team. Admins manage users and brand, not colleagues' data.
Payments
Payments are handled by Stripe. We never see or store card details.
Data processing agreement
Our data processing agreement (GDPR Art. 28) is part of our Terms and is accepted when you sign up. A signed copy is available on request.
When you leave
If a payment fails, the account becomes read-only after 14 days. After cancellation you keep read-only access and can export your data for 90 days; then it is deleted. Unpaid trials are deleted 30 days after the trial ends. We email the owner before deletion.
Sub-processors
The service providers we use to run Palletseal. Customer data is stored in the EU; the last column shows where a provider may access data from outside the EU, and on what basis. This list is part of our data processing agreement.
| Service (legal entity) | Purpose | Data location | Outside the EU / safeguard |
|---|---|---|---|
| SupabaseSupabase Pte. Ltd., Singapore | App database, login, file storage and server functions | EU – Frankfurt, Germany | Possible support and operations access from outside the EU; EU Standard Contractual Clauses |
| StripeStripe Payments Europe, Ltd. (Ireland) and Stripe, LLC (USA) | Payments, invoices and VAT | EU and USA | EU–US Data Privacy Framework and Standard Contractual Clauses. Stripe is also an independent controller for fraud prevention and legal compliance. |
| ResendResend (USA) | Log-in codes, invitations and service emails | Email logs and metadata stored in the USA | EU–US Data Privacy Framework; Standard Contractual Clauses |
| DigitalOceanDigitalOcean, LLC (USA) | Hosting of the web app (app.palletseal.com) | EU – Frankfurt, Germany | EU–US Data Privacy Framework; Standard Contractual Clauses as fallback |
| NetlifyNetlify, Inc. (USA) | This website (palletseal.com) and its contact form | Global CDN; contact form submissions stored in the USA | EU–US Data Privacy Framework; Standard Contractual Clauses as fallback |
| Microsoft 365Microsoft Ireland Operations Ltd. | Our email and support inbox | EU (EU Data Boundary) | Microsoft DPA; EU–US Data Privacy Framework and Standard Contractual Clauses for any residual access |
Certifications
We don't hold SOC 2 or ISO 27001 certification today, so we don't show those badges.
Report a security issue
Found a vulnerability? Write to hello@palletseal.com. We reply quickly and credit responsible reports.
Start · 14 days · reminder day 7
Run the numbers at your next customer.
From €150 per seller a month, excl. VAT.
Card required · Reminder 7 days before the trial ends · Cancel online before it ends and pay nothing
