Trust center

Compliance.
Documents.
Promises.

Privacy policy. DPA. Terms of service. Subprocessors. Status. Everything compliance and IT need to say yes.

Privacy

Privacy policy

What data we collect, why, where it goes, how to remove it.

Read ›
Data Processing Agreement

DPA

GDPR-aligned. Available on request. Auto-attached to Scale contracts.

Request ›
Terms of service

ToS

Plain English. No 50-page surprises.

Read ›
Subprocessors

Who we use

Supabase, Stripe, AWS SES, Inngest, Hetzner, Cloudflare, Sentry. Updated when changed.

See list ›
Security disclosure

security@boldreach.io

PGP key. Responsible disclosure. We respond within 24h.

Email ›
Compliance roadmap

SOC 2 Type II.
2026.

Audit in flight. We won't fake-claim it.